twidler
Joined: 24 Mar 2008 |
Posts: 0 |
Location: Hyderabad |
|
 |
Posted: Wed Mar 26, 2008 5:12 am |
|
 |
 |
 |
 |
I have Clamwin ver 0.92, Windows XP professional version 2002 Service pack 2.
While scanning WINDOWS folder, Clamwin scans for some time and suddenly terminates with an empty report.
Same happens when I do a full C: scan.
Can a virus prevent Clamwin from scanning a folder area?
john
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Mar 26, 2008 2:19 pm |
|
 |
 |
 |
 |
I guess it could, but it's highly unlikely--it would probably have to be aware of ClamWin (CW) or its scan process, and CW it isn't very visible yet.
Did this just happen all of a sudden or was it from the beginning of your use of Clamwin? See if you can locate the file being scanned--is it the same each time? If you can locate something, try going there and scanning the file/directory manually with ClamWin from the Windows Explorer right click menu. Is there anything peculiar about the problem file (size, name)?
Regards,
|
|
twidler
Joined: 24 Mar 2008 |
Posts: 0 |
Location: Hyderabad |
|
 |
Posted: Fri Mar 28, 2008 7:41 am |
|
 |
 |
 |
 |
I think it happened the first time I used ClamWin to scan the C: drive. I must also say that my computer had an infection when I installed CW.
I tried to locate the file that cause the problem and a ClamWin yellow-popup message "an error occurred during virus scan". Found more than one file causing the error repeatedly. They are all in the C:\WINDOWS\Installer folder and the filenames are:
83d2bb.msi (1.04 MB)
83d345.msi (1.05 MB)
83d3d5.msi (1.04 MB)
83d464.msi (733 KB)
All seem to be connected with Roxio software modules.
regards,
john
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Fri Mar 28, 2008 1:55 pm |
|
 |
 |
 |
 |
Those files all are .msi files, and Clam/ClamWin has trouble scanning .msi files. In fact, I have them excluded in my ClamWin scan Filters because it "chews" on them too long for me. Yours aren't really very large, but they have a naming pattern I've seen in some malware. Just to be sure, I think you should upload each file (separately) to Jotti and have them scanned there with multiple scanners (including Clam). Get rid of them if three or more Jotti scanners find malware in them.
You could also search each filename on Google and see if you can find anything about them.
Jotti's link: https://virusscan.jotti.org/ on the Web. It's frequently busy, so have patience.
Regards,
|
|
twidler
Joined: 24 Mar 2008 |
Posts: 0 |
Location: Hyderabad |
|
 |
Posted: Wed Apr 16, 2008 7:39 am |
|
 |
 |
 |
 |
Thanks for the Jotti link. Found no malware on those. I'll take your advise & exclude *.msi on the scan & see.
john
|
|