Hi folks,

I´m almost solving the problem of how to install a Clamwin in a big company... however... i have some questions. =)

1. I decided not to use the tray icon (so, the users, wont be able to close it!) So, i put the update and scan schedule, into the windows task manager (all of you agree it´s the best way?)

2. I really need real time scan, so i´m installing the Win Patrol because I can hide its tray icon from the user.... =)

However, with the clamwin tray closed, the win patrol will be able to scan files in real time in association?

however... if anyone have a solution to avoid the user of closing the clamwin tray, or to hide it, would be nice!!
best regards... =)

another option would be the winpooch... it seens to fit my needs...
i just need to hide its damn tray icon... or prevent user closing it

I'm not sure if this will help you, Heitor, but you might look at the information relating to a "silent install." It is in the FAQ (frequently asked questions) at this link:

https://www.clamwin.com/content/view/100/27/

Evidently you are deploying ClamWin in a large network environment. I'm just a guy who uses it on his own personal computer. I hope this helps. If it doesn't, I'm sure someone else will post a more helpful answer here when they have time. Perhaps when time allows, the ClamWin team can address this in their FAQ for future use. Your quesiton might come up again.

Regards,

The ClamTray is only used for scheduling and easy access to the menu.
So yes, other programs should be able to launch clamwin without it (they will probably use clamscan.exe anyway). This is just like the Windows Explorer plugin, which also works without the tray icon.

For me, i already think disabling the tray icon is not a good idea, because whe the real-time scanner become implemented, the tray will have to be active all the time.
For Clamwin I've already known about the silent install. For Winpooch I think it doesnt have silent install, but i can make a script to do that.
Now, the most difficult thing for me, to implement the clamwin (and Winpooch) on a big company, is prevent the user from closing the two programs (thats really necessary). The ideal solution, for me, is setting a password that would be asked every time that any user try to close the clamtray or uninstall the clamwin.

* About Winpooch, i almost giving up of installing (because I cant avoid user closing it, and cant make it work silently), and just wait for the clamwin real-tine scanner to be developed.

Best regards!

Cyberhawk is a free behavior blocker that is probably better than Winpooch. Winpooch uses some API hooks that the ClamWin team believe could be dangerous. Below is a link to where you can check it out. I've used it for a couple of months now. It resides in the system tray, but it is silent and no trouble. They are coming out with a paid version (about $20, I understand) that has a little more horsepower in a few months, but the free version is good enough.

https://www.novatix.com/.

Regards,

Does It scan real-timelly with Clamwin?

Cyberhawk isn't associated with any other software, so it doesn't need ClamWin. It monitors critical processes on your computer in real time, and it prevents a piece of software from doing something it shouldn't or it asks you what to do if there is some doubt. It's a behavior blocker--sort of like a firewall for computer processes. It doesn't use a signature database so it doesn't need frequent updates, but you can enroll in the network of users to keep track of new threats and get automatic updates. It's been very quiet in the couple of months I've been using it. The only time it's alerted me is when I've installed some new software--it asks if it is okay to allow installation in the Registry, etc.

So you could use Cyberhawk for real-time monitoring and use ClamWin for on-demand scans. I don't know if you would want to put Cyberhawk on every desktop--just your server(s) probably. It works on one machine. The pro version of Cyberhawk that will come out in a few months might be set up for network use, but I don't really know..

Regards,

yeah ... i tried it... but I think I can use it because the user can close it, at any time.
I think the best solution is wait for the clamwin real-time scan, and, hope so, my password sugestion that would be used when the user tries to close the clamtray.

the correct is: I CAN'T!

Well, I guess you could put it on your server only, and individual workstation users wouldn't see it. Perhaps most of the files that would be infected would be on the server.

Anyway, the ClamWin team certainly listens to users, so perhaps you'll get something in a future version.

Regards,

I trying to do something about the user closing clamtray problem, but i couldnt compile the 88.4 src (can find windows.h... something like that), and I couldnd found the 88.5 src for download... =)
I was thinking about, at least disable the "exit" button of clamtray.

Hi Heitor,

The long-awaited ClamWin 1.0 will IMO have all the answers you need. It does not only have on-access scanning, but is also implemented as a Windows service, which you can secure with administrative privileges.
The only problem could be users changing the settings, but I'm sure we can work something out to prevent that (maybe install the gui for administrators only or something like that).

To anticipate on your asking : we do not have a time schedule for releasing 1.0 (sorry about this, i know this is what always wants, but it just isn't realistic in this volunteer-only project).

I'm aware that this doesn't solve your current problems, but it gives you a view of what the future ClamWin will bring.

The idea for change settings is using a forum visual activation like method, i.e. the server sends an image with semi-scrambled random generated code and the client needs to send the correct word asked to the user. This is only a plan, an idea suggested by alch that I think it's valid, but we'll see if it will fit in clamwin v1