Hello!

My computer was infected by the virus/worm RAVMON (W32/RJump.worm). This is an old worm and i wonder why clamwin doesn't find and cleaned it before my computer was infected. Is there maybe anything wrong with my settings?

Bye

Michael

because often it's stored on external usb storage devices, enable show hidden files from explorer and look in your usb key
take care to open the device using the right mouse button and explore instead of double clicking on the drive
since this will execute the worm

Isn't there a chance, that clamav will clean / quarantine the worm before it infects the devices?

In my case also my local harddrives have been infected and it was a real hard work to clean them. Best it works with the Flash_Disinfector.

My in the future clamav will find and clean this wom, too .

Michael

there is a "workaround" for these kind of worms
delete autorun.inf and create a folder named autorun.inf

Isn't there a chance, that such kind of worms will be detected by a anti-virus software?

Michael

Sure, most antiviruses can find RAVMON (W32/RJump.worm). Here's some information about it at https://anoop-aravindan.blogspot.com/2007/11/virus-w32rjumpworm-ravmonexe.html on the Web. It's still around after a few years because of the heavy useage of portable devices. Send a copy of it to Clam at https://cgi.clamav.net/sendvirus.cgi on the Web if you don't think they can. ClamWin could probably have spotted it if it had an on-access (real-time) scanner. As Sherpya says, you should /scan a portable drive before using it for the first time.

Regards,