Hello, if clamav needs real time protecting then i can make it with visual basic.

Here is what i have, test drive it! I cant get the updates from cvd files so i have to get my own files (.db) which is why i need ther clamav files to be .db The updates are from my web site and i have so far 60,000 defs.

[link removed]
[edit] This forum is for Clamwin Antivirus support issues. Please do not use it to promote your software.
P.S. it is not possible to offer real-time protection using VB. It requires kernel driver usually written in C.
[/edit]

WHAT DO YOU MEAN VISUAL BASIC CANT MAKE REAL TIME PROTECTION!?!?!?! I JUST MADE IT!!!!!!!!!!!!!!

i even tested it.
I placed a virus def in a txt file other than the database. The real time protection automaticly deleted it in a few seconds!



jeeze dont be so stubborn!!!!----- Anyways...your loss

If you placed the signature in a text file, did you just scan that file only, did you scan the directory, or did you scan the hard drive? If not, try to scan all of them and see if you get the same results.

You will need more than 60,000 signatures. Clam is now up to about 145,000 and many AVs have 200,000+ considering phishing/spyware. MD5 signatures are easier to get/make for Clam, but they aren't reliable if the virus/malware changes because the MD5 sig is made from an entire file--not just the "bad" part of the malware. VirusTotal, Jotti, and VirSCAN.org all show MD5 sigs for malware found.

Regards,

Maybe we should here him out, he may have created an online protection.

How about a mod go check out the program and report back.

If it is BS you can then lock this thread

ok thanks!!! Trigon, even though u think i might be bs.

anyways, i think ill go make mine open source too, after i get my site going.

heres my antivirus!

[EDIT] link removed: malware [/EDIT]

Don't use this file! You could add it to your virus collection, but ClamWin already detects it! Looks like it is some kind of Windows crasher! Here's what VirusTotal says about it:

File PcAntiMalware.rar received on 08.15.2007 00:21:50 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 11/32 (34.38%)
Loading server information...
Your file is queued in position: 2.
Estimated start time is between 46 and 66 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2007.8.15.0 2007.08.14 -
AntiVir 7.4.1.62 2007.08.14 _0557_0004_000
Authentium 4.93.8 2007.08.14 could be infected with an unknown virus
Avast 4.7.1029.0 2007.08.13 Superhacker-1077
AVG 7.5.0.476 2007.08.14 BAT/Trivial.ET
BitDefender 7.2 2007.08.14 -
CAT-QuickHeal 9.00 2007.08.14 Kiss
ClamAV 0.91 2007.08.14 _0256_0006_001
DrWeb 4.33 2007.08.14 -
eSafe 7.0.15.0 2007.08.10 VBS.EnableSharing
eTrust-Vet 31.1.5058 2007.08.14 -
Ewido 4.0 2007.08.14 -
FileAdvisor 1 2007.08.15 -
Fortinet 2.91.0.0 2007.08.14 -
F-Prot 4.3.2.48 2007.08.14 -
F-Secure 6.70.13030.0 2007.08.14 -
Ikarus T3.1.1.12 2007.08.14 Trojan.JS.Wincrash.D
Kaspersky 4.0.2.24 2007.08.15 -
McAfee 5097 2007.08.14 -
Microsoft 1.2704 2007.08.15 -
NOD32v2 2460 2007.08.14 -
Norman 5.80.02 2007.08.14 -
Panda 9.0.0.4 2007.08.14 -
Prevx1 V2 2007.08.15 -
Rising 19.36.12.00 2007.08.14 -
Sophos 4.20.0 2007.08.12 Amt
Sunbelt 2.2.907.0 2007.08.14 -
Symantec 10 2007.08.15 -
TheHacker 6.1.8.168 2007.08.14 -
VBA32 3.12.2.2 2007.08.14 Trojan.JS.Wincrash.d
VirusBuster 4.3.26:9 2007.08.14 -
Webwasher-Gateway 6.0.1 2007.08.14 Virus.Jerk-Miky
Additional information
File size: 490299 bytes
MD5: 40e6abb160a1f2bba66d40628839bfe5
SHA1: b244e1e3399251410b7e8020eb19953ae44d7a9a
packers: ARJ

Regards,

So i guess he was full of BS?

I guess so--1/3 of the AVs spot malware. It could be unintentional--just some of his code that appears similar to that virus, but I wouldn't touch it.

Regards,

yeah!!! ofcourse theres a virus in it. It was clamav's virus definitions before it got turn into a .cvd. so ofcourse it would detect it!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

DO YOU HAVE BRAINS!!!!

OMG!!!!!
WHAT DO I HAVE TO DO TO MAKE YOU GUYS BELIEVE ME THAT MY ANTIVIRUS IS SAFE?!?!?! AN IMAGE????


A picture of my anti Virus which i wall anti malware Scan it if you want

https://rapidshare.com/files/49220082/2007-08-08_193407.png.html

heres it AGAIN!!!

USE AT YOUR OWN RISK----IF YOU THINK ITS A VIRUS, DON'T DOWNLOAD IT! CLAMAV OFCOURCE WILL FIND A VIRUS BECAUSE ITS USING CLAM's OLD VIRUS DATABASE.


[edit] I'll have to reiterate - this is clamwin forum. If you want to promote your software, then do it on your own website. A repeated offence will result in a ban of your account in this forum[/edit]

Ten other antivirus programs besides ClamWin also saw malware code when they scanned your file, and they didn't have the Clam signatures. They did have malware signatures, however!

Regards,

They are detecting his "signatures.db" file. The db file by itself is relatively harmless, but it obviously contains something the AV vendors like, but it isn't an executable so you don't have to worry about it.

Why Nathaniel is here freaking out on this forum with his visual basic (ew!) is beyond me.

Nathaniel, you do realize those signatures are published under the Gnu Public License and the fact that you're including them in with your stuff means you have to release yours under the GPL as well.

Thanks for the info, bOne. Most likely there is something in his code that is similar to some of the older Windows crashing stuff. Anyway, my NOD32 and other AVs don't see anything wrong with the "official" ClamWin signature database, so I think I'll just wait for ClamWin v1.0.

Regards,