[clamav-users] The "=" sign in freshclam options (---datadir= as an example) is mandatory?

2021-07-14 Thread Michael Wang
I discovered that the "=" sign in freshclam option is mandatory. For example: freshclam --datadir=c:\temp\database (with =) and freshclam --datadir c:\temp\database (without =) are different. In the latter, the option "--datadir c:\temp\database" is ignored as if it were not specified. On the ot

Re: [clamav-users] clamscan: permission denied on many files being used by another process

2021-07-13 Thread Michael Wang
amscan will not be able to detect it. On Mon, Jul 12, 2021 at 11:45 AM G.W. Haywood via clamav-users < clamav-users@lists.clamav.net> wrote: > Hi there, > > On Mon, 12 Jul 2021, Michael Wang via clamav-users wrote: > > > I run ClamAV on windows using the latest portable insta

[clamav-users] Php.Trojan.MSShellcode-81 FOUND on MS IIS log file?

2021-07-12 Thread Michael Wang
Clamscan detested a virus in Microsoft Internet Information Services 8.5 log file: *C:\inetpub\logs\LogFiles\W3SVC1\u_exNN.log: Php.Trojan.MSShellcode-81 > FOUND* > I looked at the file manually, it consists of comments and GET and POST messages. How do I determine if this is a real or false

[clamav-users] clamscan: permission denied on many files being used by another process

2021-07-12 Thread Michael Wang via clamav-users
Hello all ClamAV users: I run ClamAV on windows using the latest portable installation with all default configuration. I run the task scheduler under the SYSTEM user with the highest credentials checked, but I still have lots of permission denied messages. I logged in locally and checked one of t

Re: [clamav-users] How to make freshclam to update existing files?

2021-07-09 Thread Michael Wang
base\tmp.dcd8c0cb40\clamav-907671efc5b51d897ec211313228eb86.tmp-daily.cvd to daily.cvd: File exists*ERROR: Unexpected error when attempting to update daily: Failed to read/write file to database directory ERROR: Database update process failed: Failed to read/write file to database directory ERROR

[clamav-users] How to make freshclam to update existing files?

2021-07-08 Thread Michael Wang
I am running the freshclam.exe like this: PS C:\Users\m.wang> \\xxx\clamav\bin\freshclam.exe --datadir \\xxx\clamav\bin\database and I got the following error: ERROR: updatedb: *Can't rename* \\xxx\clamav\bin\database\tmp.78a757d3cf\clamav-57fd2bf1f4d6d423e4896f0ef3e97c52.tmp-daily.cvd to daily.

Re: [clamav-users] clamav incremental scan?

2021-05-04 Thread Michael Wang
up? Thanks. On Tue, May 4, 2021 at 4:29 PM Grant Taylor via clamav-users < clamav-users@lists.clamav.net> wrote: > On 5/4/21 12:19 PM, Michael Wang wrote: > > looks like this should be a functionality of the clamav itself. > > What you are describing sounds like somethi

[clamav-users] clamav incremental scan?

2021-05-04 Thread Michael Wang
It seems that this should be a common question, but I did not find a definite answer via Google search. I saw solutions to only scan files in the last 60 days, but it is not difficult for a virus file to change date, isn't it? I can think of to maintain hash table with file name and its checksum, b

[clamav-users] automate clamav on windows and user manual popup

2021-04-27 Thread Michael Wang
Hello All: I would like to automate the clamav install on windows. The method I have in mind is to create a GPO which is a scheduled job written in powershell, and this job will install ClamAV, setup other jobs to download the database and do the scan. I could find info on the topic, so please sha