Clam Sentinel Version 1.17 has been released. This version takes care of
some bug fixes, adds support for the Russian and Portuguese (Brazilian)
languages, includes 2 new system monitor warnings for new files created,
and it also includes the partial extension of the
system monitor heuristics to all folders. The scanning code has also been
improved for faster detection against multiple infections.

Clam Sentinel is a free program for users of Windows 98 through Windows 7
computers that enables real-time scanning with ClamWin. It is available for
download at https://sourceforge.net/projects/clamsentinel/ on the web. It is a
separate project from ClamWin, but ClamWin must be installed and configured
before installing Clam Sentinel. New users can read the Simple Guide
downloaded with the Clam Sentinel program. You can get support, report bugs,
and suggest improvements to Clam Sentinel at
https://sourceforge.net/projects/clamsentinel/ on the web. The Clam Sentinel
author is Andrea Russo of Italy, and he deserves a big "thank you" for
extending ClamWin's functionality.

Regards,

This is good news!
The strange thing is that Sentinel 1.16 moves Sentinel 1.17 to Quarantine as I try to download it...

Yes, the Sentinel heuristics can be a bit touchy if there is an installer file involved--because they often have some suspicious charcteristics! Installers often do not use good programming techniques.

If you are going to download from a reputable site, stop Sentinel, download the file, scan it with ClamWin/other AV, then install it, and then turn Sentinel back on.

You can also verify a file with Jotti or Virus Total before you run it.

Regards,

1.18 is out only a few days after 1.17, what is new? I guess bugfixes?

Version 1.18 is a fix for a small bug on Windows 98. There are not enough Windows 98 testers for both ClamWin and ClamSentinel.

Regards,

new bugs in clam sentinel 1.8 (not in clamwin):
1. when download from firefox file with exe extension and file is large (if need more than some seconds for download)
for example "firefox setup 8.0.exe" "A file with invalid PE format was moved to quarantine" (becouse firefox create an *.exe file 0 bytes and *.part witch is the filled file)
2. popup window with warning (pua/system changes detected) stay and nothing can clear him... only exiting from clam sentinel and new starting
this under win2000
3. under windows xp home sp2 when installing sp3 notepad was removed > notepad.exe.badpeheader from \WINDOWS\SoftwareDistribution\...
4. when installing avisynth (all vesrions 2.5x) - avisynth.dll - suspicious file -> moved to quarantine
is there option for suspicious file not going to quarantine, and only infected?
sorry for my poor english

These are not bugs! Sentinel is not as "polished" as are the commercial AV programs, and you should read the Simple Guide that comes with Sentinel before using it. The Simple Guide will tell you about the recommended/default settings, and you should not change them unless you are an expert user. If you are not an expert user, and you do not want to read the Simple Guide, you should not use Sentinel.

The Simple Guide says about PUA:

"The next option is Select PUA. You will not normally want to select this option because it does not identify actual viruses--it only identifies Potentially Unwanted Applications that could be virus tools or files that were created with such tools--such as packers, scripts, and remote communication/control programs. If you surf the internet with PUA enabled, you will get too many PUA false positives in the temporary internet folder from “good” scripts and packed scripts used by many web sites. This is an option for expert users."

The Simple Guide says about downloading:

"Even if you do not download files from porn sites, pirated software sites, or from people you do not know, the System Monitor may give false positive warnings when downloading “good” files. If you are sure the file is okay, Stop Sentinel and re-download the file. You should upload a file to Jotti or Virus Total as a check before installing. If it is a “good” file, install it,enable the System Monitor and delete the file from ClamWin's quarantine folder. Then run/execute the program to see if there are any System Monitor warnings to whitelist."

Many installers use "sloppy" programming that looks the same as malware to Sentinel.

Regards,

my mistake, for popup window i mean baloon (for virus or suspicious file)
it's a bug.
there is no timeout settings in clamsentinel.ini for baloons (neither single click or double click on baloon). i must restart clam sentinel to remove baloon.
and my settings are by default...
try this - create "new text document.txt" (leave it empty - 0 bytes) and save as "new text document.exe" (save as type: All Files). and see... another bug - if you create second exe file 0 bytes - there is no more baloons - only first stay, but next exe is deleted silently...
but for example "About" baloon can be removed with left mouse button.
sorry my poor english

I see now. I have reported this to Andrea Russo, the Sentinel developer. You can report bugs and get help at the Sentinel web site at https://sourceforge.net/projects/clamsentinel/ on the web. click on Sentinel support--not Source Forge support at the top.

Regards,

I have fixed the problem related at the balloon on Windows 2000.
On Windows 2000 there is not the possibility of to close the message with a click, so for the virus alert message now on Windows 2000 there is a timeout of 30 seconds.

I have also fixed the problem about files with size=0.
The about balloon don't uses the Windows message, it's a window that has the same aspect that a message, I use this for to have balloon on Win98/Me and for to have balloon with a large text size. Could be possible to use it also on Windows 2000 for the other balloon messages but this window don't supports text in unicode and filenames could be in unicode.

The new test version is available here:

https://clamsentinel.cvs.sourceforge.net/viewvc/clamsentinel/ClamSentinel/ClamSentinel.exe

Thank you for your support.

bye,
aru

The problem with "A file with invalid PE format was moved to quarantine!" has been solved with 1.19test1.
But when I click "Check latest version", it says "The new version 1.18 is available".

You should ignore the Sentinel message about a new verson if you are using a test version of a future release. Sentinel compares your version with the latest official release and gives a message if your version is not the latest official release. It will be a while before version 1.19 is released. Andrea likes to test Sentinel really well.

Regards,

Could someone post a link to Sentinel 1.19test1 please! Thank you.

Contact Andrea Russo at the Sentinel web site re: any test verson of Sentinel. The site is at https://sourceforge.net/projects/clamsentinel/ on the web. Click on Support and then follow the instructions for Help.

Regards,