ClamWin Free Antivirus :: View topic

Posted: Thu Apr 09, 2015 2:25 pm

GuitarBob wrote:

Sounds strange. Are you using ClamWin with another real-time AV (you should be using a real-time AV along with ClamWin)? Anyway, I suggest that you download Malwarebytes free antimalware (MBAM). The free version is not real-time but, it comes with a 14 day trial of the premium version, which is real-time). Do a complete scan of your computer with MBAM--configure it for rootkit scanning also. If nothing is found/quarantined by MBAM, try to get into Windows safe mode (if you can), and do another full scan with MBAM. Then update ClamWin to the latest verson .98.6. Get back here if you need more help after all this.

Thanks for using ClamWin! By the way, only download ClamWin from the download link on the main ClamWin web page. I would not trust any other site! There are many web site that include adware/malware with their downloads, and this is probably what you have.

Regards,

GuitarBob,
I'm using NT4 and the only version I found that was still compatible with it was 0.97.2. I found it from a web search that linked to a ClamWin forum from 2006 by the user sherpya, but updated as late as 2011. The link to it is: https://forums.clamwin.com/viewtopic.php?t=1721

Download of the file is located at: https://sourceforge.net/projects/clamwin/files/clamwin/0.97.2/clamwin-legacy-nt4-0.97.2.exe/download

The forum title was: "NT 4 Legacy setup for 0.97.2 is available for download".

Based on my research so far, I don't think Malwarebytes will work on NT4.0 SP6.

This is a closed area and I'm limited to what I can bring into it. I have been using it for over a year and downloading the av signature files, but the issue at the moment is that the links from the ClamWin av update site appears to have been hijacked or infected.

Thanks for your reply.

Posted: Thu Apr 09, 2015 3:42 pm

Sherpya stopped support for NT4 at .97.2. To your other problem, it sounds like you may have a redirect trojan. You should do a search to see if there are any up to date AVs that support NT4 still. Try SuperAntispyware. I use to work for them years ago.

Posted: Thu Apr 09, 2015 4:20 pm

ROCKNROLLKID wrote:

Sherpya stopped support for NT4 at .97.2. To your other problem, it sounds like you may have a redirect trojan. You should do a search to see if there are any up to date AVs that support NT4 still. Try SuperAntispyware. I use to work for them years ago.

Yes, that's why I'm still using the .97.2. And this NT machine is not connected to the internet, so I download the virus db signature files on a separate office Win 7 pc. It's on this Win 7 pc, connected to the internet, that I get that redirect or hijack like error.

I have Symantec Endpoint Protection 12.1 and Malawarebytes on this Win7 pc and both have ran clean for any issues.

So, I'm stuck using Windows NT 4 SP6 on two systems in my areas for now, so I need to get a clean AV file.

Posted: Thu Apr 09, 2015 8:29 pm

You can try a search on the ClamAV official site, but as far as I know, those are the only links to download them manually. I just tested and they aren't hijacked for me.

Posted: Thu Apr 09, 2015 11:08 pm

Sorry--didn't realize that was a legacy OS. See if you can get into Windows safe mode (F8 repeatedly when booting up) and then try an update. If you can't, then perhaps you could use another computer to get the signature database for later installation on your machine. While you are in safe mode, do a scan with the updated ClamWin database.

Dr. Web's free Cureit scanner is pretty good--I used it for cleanup when I was preparing signatures for Clam AV (and getting an occasional infection as a result). I don't know if you can use it.

Your best bet might be to get one of the free rescue CDs that come with Linux or another OS on the CD. The AV on the CD runs from the CD, so viruses can't use the installed OS on the comuter to hide from it--if you update the signatures. I've used the ones from F-Secure, Dr. Web, Kasperksy, and Virus Blok Ada. Make sure it can update before you scan.

Regards,