jwadew
Joined: 05 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Sun Aug 06, 2006 1:02 am |
|
 |
 |
 |
 |
I just discovered my hmailserver email got infected with the Netsky virus. ClamWin had not detected it. Fortunately I caught it before it went too far, by scaning with F-secure and Norton. both of which found the virus.
I thought maybe the virus came some time ago, and only now did F-secure, Norton and ClamWin update to be able to catch it. But no, I have all the latest version and update from ClamWin. I even did the check update to be sure. But scaning the file with ClamWin does not find the virus.
So I uploded the virus to ClamWin, per the FAQ, and the message comes back telling me that virus (under a different name) is already in the updates.
To ClamWin (hopfull you will see this): Can you check this out, and get something in the updates.
Thanks, and keep up the good work. I appreciate your product!
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Sun Aug 06, 2006 2:54 am |
|
 |
 |
 |
 |
I am not sure if this is a problem with clamwin or how you use it with hmailserver. You say that the online scanner detected it, therefore it means that ClamAV/ClamWin already recognise the signature. So I am suspecting that the problem lays elsewhere.
Can you save the infected attachment and scan it with clamwin, as well as online on https://www.virustotal.com
Also please zip it with password "clamwin" and email it to clamwin at clamwin.com
P.S. Please do not make bold alarming statements before the issue is fully investigated, it is quite possible that the problem is with your particular configuration and does not affect all users (I had to edit your post)
|
|
Nico
Joined: 18 Jun 2007 |
Posts: 0 |
|
|
 |
Posted: Mon Jun 18, 2007 12:38 pm |
|
 |
 |
 |
 |
Hello all,
I'm a new ClamWin user, I think There is something I don't understand. I hope my question be not stupid.
I have just installed ClamWin 0.90.2.1 (updated today: Jun 18 2007) and put it to the test on my little collection of malware. They are e-mail (.eml files) I have received time by time with viruses enclosed.
I have noticed that ClamWin don't detect several viruses (though, it has recognized other viruses I have checked):
W32/Netsky.P@mm (F-Prot) ***
W32.Beagle.FG@mm (Symantec) ***
TR/Dldr.Stration.C (Avira)
TR/Dldr.Stration.Gen (Avira)
Worm/Warezov.FH (Avira)
*** I have sent the first two files to the scan service on line, but it said me they already are known.
Some suggestion?
Thank you
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Mon Jun 18, 2007 12:50 pm |
|
 |
 |
 |
 |
you need to turn on "treat files and mailboxes" in advanced settings tab. It is turned off by default because email files are not directly executable
|
|
Nico
Joined: 18 Jun 2007 |
Posts: 0 |
|
|
 |
Posted: Mon Jun 18, 2007 1:54 pm |
|
 |
 |
 |
 |
Thank you so much, alch, for suggesting me an effective system to solve my problem. ClamWin has detected all viruses.
|
|