|
shkaff
| Joined: 25 Jan 2006 |
| Posts: 0 |
|
|
|
 Posted: Wed Jan 25, 2006 9:26 pm |
|
 |
 |
|
|
clamwin v0.88 , OS Windows XP HE + SP2, Windows 2000 Pro + SP4
Hidden file win32ssr.exe ( seems W32/Tilebot-CW) was found on PC at work, but ClamAV can't see and scan it even "show hidden files" option is set.
For experiment I created empty text file , changed extension to exe , set "hidden" attr , then scan directory with file. Result was:
-- summary --
Known viruses: 42505
Engine version: 0.88
Scanned directories: 1
Scanned files: 0
Infected files: 0
Something wrong?
|
|
|
|
alch
Site Admin
| Joined: 27 Nov 2005 |
| Posts: 0 |
|
|
|
| Posted: Wed Jan 25, 2006 11:45 pm |
|
|
|
|
|
clamwin scans hidden files. It omitted your empty text file because it was empty.
Try downloading eicar.com from https://www.eicar.org and set hidden attribute on it, clamwin will detect it.
What has likely happened is that win32ssr.exe file on your system was already loaded and protected itself from being accessed by clamwin scanner. This problem should go away once we release on-access scanner.
|
|
|
|
shkaff
| Joined: 25 Jan 2006 |
| Posts: 0 |
|
|
|
| Posted: Thu Jan 26, 2006 8:27 am |
|
|
|
|
|
Thx!
Does ClamAV omit files for other reasons then 0 size?
It's possible to do Clam writing into report about omitted files with explanation , why it was omitted?
|
|
|
|
alch
Site Admin
| Joined: 27 Nov 2005 |
| Posts: 0 |
|
|
|
| Posted: Thu Jan 26, 2006 8:35 am |
|
|
|
|
|
0 size files are not scanned, then there are excluded files (configured in clamwin preferences) and media files (large avi).
Extended reporting is not an option unfortunately as it is the limitation ov clamav scanning library.
|
|
|
