I've found a solution, but with Clamscan.exe, and not Clamwin.exe.
carlbray wrote: |
budtse wrote: |
Are you shure the file is still on it's original location ?
- if the same file is in quarantine, just say "file excluded" and delete the file
budtse |
Yeah it's not removed.
I removed the file from my download folder and from quarantine.
Then download the file with FlashGet which kicks off clamscan with
C:\Program Files\ClamWin\bin\clamscan.exe --database="C:\Documents and Settings\All Users.WINDOWS\.clamwin\db" -l "C:\Documents and Settings\All Users.WINDOWS\.clamwin\log\ClamScanLog.txt" --bell --move="C:\Documents and Settings\All Users.WINDOWS\.clamwin\quarantine"
This correctly identifies the file as a virus and moves it to quarantine.
Scan started: Fri Jun 16 12:15:21 2006
C:\Downloads\eicar_com.zip: Eicar-Test-Signature FOUND
C:\Downloads\eicar_com.zip: moved to 'C:\Documents and Settings\All Users.WINDOWS\.clamwin\quarantine/eicar_com.zip'
-- summary --
Known viruses: 60037
Engine version: 0.88.2
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 8.803 sec (0 m 8 s)
When I then download it again it gets excluded but not deleted.
Scan started: Fri Jun 16 12:44:01 2006
C:\Downloads\eicar_com.zip: Eicar-Test-Signature FOUND
File excluded 'C:\Downloads\eicar_com.zip'
-- summary --
Known viruses: 60037
Engine version: 0.88.2
Scanned directories: 0
Scanned files: 1
Infected files: 1
Not moved: 1
Data scanned: 0.00 MB
Time: 5.328 sec (0 m 5 s)
BTW: Is this the right forum? or should I be posting somewhere else??
Cheers,
Carl |
Is there anything that works with Clamwin ?
Regards
PS : Sorry, I did not search enough ...
