Hello,

after research of very bad behavior of my Computersystem. No Microsoft Updates and no new Antivirus Signature Updates for Clamwin worked on my Networksystem.

I've found the reason. My System was infected over USB Stick with the Conficker B Worm. This Worm was and is not detected and deleted by Clamwin 0.96.2. After reading some Threads, it seams to me that this Problem is not new.

As a matter of Fact, Clamwin did not protect my Network and my Computers!

I deinstalled Clamwin and installed Avira Antivir and Microsoft Malicious Software Removal Tool. Both found the Conficker B at once and removed it from the USB Stick and my Networksystem. After that, everything is in order now.

I was and maybe still be a Fan of Open Source Antivirus Software, but I'm very disappointed that Clamwin were not be able protecting my Network.

Regards and Qapla'

Qugh

After cleaning with Avira Antivir and Microsoft Malicious Software Removal Tool I'm reinstalling clamwin 0.96.2. Clamwin found the Conficker B now on another USB Stick I've isolated, and identified it as the Worm.Downadup-2. But he's only found if I do a scan of the Stick. The Worm resides in the autorun.inf and infected my Testsystem again. After the fresh Installation the new Version deleted the infected Files on the Testsystem but did not protect it of Infection.

Any Ideas?

Qapla'

Qugh

ClamWin is not a real-time scanner--it is only an on-demand scanner. It will only detect infecged files when you do a manual scan (on-demand) or do a scheduled scan. In addition, it must have a signature for a specific virus in its database--it has no heuristic detection or behavior-blocking ability.

The ClamSentinel project (not associated with ClamWin) is a small free program that adds a basic real-time scanner to ClamWin that checks files as they are added, modified, or copied on your computer. It also protects USB/removable drives, and it puts viruses in the ClamWin quarantine folder. Sentinel is available at https://sourceforge.net/projects/clamsentinel/ on the web.

Regards,

that explains a lot. I'm going for testing clamsentinel now.

Thanks for your help.

Regards and Qapla'

Qugh

That's the missing Link! Clamsentinel is the solution and the recomended sidekick for clamwin.

After inserting the infected USB Stick, the Worm was removed instantly.

My System is protected now!

Thanks a lot.

Regards and Qapla'

Qugh

I am glad you like ClamSentinel. It provides good basic protection for users who are careful where they surf and do not click on unknown links. It only provides basic real-time protection, so there are still some ways malware can infect your computer that it does not cover--such as the browser, drive-by downloads, exploits, etc. Clam AV also does not have the resources to do daily massive signature updates like the big AV companies.

That's why I use Sentinel with WinPatrol (a free version is available) and Malwarebytes (a free version is available). WinPatrol blocks/informs about some malicious behavior, and a daily scan with Malwarebytes does a good job of removing anything left behind.

Regards,