Clam Sentinel Activity
Brought to you by:
dynclient,
sentinelguy
Activity for Clam Sentinel
-
Robert Scroggins posted a comment on discussion Open Discussion
Thanks! That old post brought back some memories. Good luck with Xylent. I'll check it out. Keep it as simple as you can. Regards, Robert Scroggins On Sat, Apr 27, 2024, 5:46 AM Emirhan Uçan hydradragonav@users.sourceforge.net wrote: Goodbye ClamSentiel long live Xylent! Goodbye To Clam Sentinel! https://sourceforge.net/p/clamsentinel/discussion/976132/thread/7f3a2f19/?limit=25&page=1#b25d Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/clamsentinel/discussion/976132/...
-
Emirhan Uçan posted a comment on discussion Open Discussion
Goodbye ClamSentiel long live Xylent!
-
Hello Lukas: Here I am. I relocated my signon information for Clam Sentinel forum. Good that you are able to do something with Python For the Sentinel heuristics, the main one was the calculation of the entropy of a file. Entropy is the measurement of the "randomness" of a file. A file that is heavily obfuscated with other software will be very random, while a file that performs legitimate useful activities will be direct and to the point, not showing much entropy. Maximum entropy is 7.0. We set...
-
Lukas posted a comment on discussion Open Discussion
Hi Robert, I don't know if you read but I sent you an email with a link to download 7z. Let me know when it arrived.
-
Hi Robert. I guess you're not answering my forum posts and emails haha. If you read this, I would like to inform you that I managed to create a simple script in Python for the latest clamav engine. When running, it can scan with clamscan any file in the selected folder for any clamav signatures, and if so, it quarantines and encrypts it. It's not something "amazing" but I'll keep working tomorrow. I am planning to do: -on-demand scanning - work on mistakes - create a heuristic -develop a graphical...
-
Robert, unfortunately google doesn't allow you to send any zip archives, 7zip etc... Could you download the file via torrent? I'd give you a signature to create a file and download it directly from me. qBittorent is good
-
I get gmail all the time with no problem. If you are sending from a server, perhaps Google is blocking your server. I personally only block a handful of commercial spammers, but I do automatically delete lots of subjects/words used by spammers though. I don't use anything but gmail for communication, and I also don't use any social media websites. Regards, Robert On Thu, Aug 31, 2023 at 10:06 AM Lukas ksexvedd@users.sourceforge.net wrote: Robert, the problem is I can't email you. I got a return from...
-
Robert, the problem is I can't email you. I got a return from my server that you have some kind of block.
-
Hello Lukas: I think that is it. Andrea told me it was undocumented. but maybe he decided to document it. Early on, he also had an option to only use the Clam A V daily signatures so that scans would be faster, but he only used it for a month or so. Regards, Robert On Thu, Aug 31, 2023, 9:15 AM Lukas ksexvedd@users.sourceforge.net wrote: I don't know if you mean the Clam Senintel.conf file in %appdata% which has a section Path = 3 - all on 2 - sentinel portable 1 - heu only Goodbye To Clam Sentinel!...
-
Robert, the problem is I can't email you. I got a return from my server that you have some kind of block.
-
Hello Lukas: Email is fine with me. I didn't realize messages on the Clam Sentinel forum took so long. I never check the forums now. I also didn't realize the Sentinel code was so small. I guess that is why Andrea used delphi. Regards, Robert On Thu, Aug 31, 2023, 9:17 AM Lukas ksexvedd@users.sourceforge.net wrote: The sentinental source code is only 3Mb, and 500kb when compressed. Believe me, I could telegram it to you haha. I will email you future messages so as not to clutter the forum or if you...
-
The sentinental source code is only 3Mb, and 500kb when compressed. Believe me, I could telegram it to you haha. I will email you future messages so as not to clutter the forum or if you prefer we can use something like bitmessage
-
I don't know if you mean the Clam Senintel.conf file in %appdata% which has a section Path = 3 - all on 2 - sentinel portable 1 - heu only
-
Hello Lukas: My email address is rscrogg@gmail.com for source code and future email. There may be a limit on size for attachments. I hope you can do something on CS. I have been thinking of taking a look at Python. Regards, Robert Scroggins On Thu, Aug 31, 2023 at 8:39 AM Lukas ksexvedd@users.sourceforge.net wrote: Hi robert. I wish you had received my message two weeks ago. It seems to show me that it is waiting for moderator verification. Coming back, I'd be happy to send you the source code. Tell...
-
Hello Lukas: I have looked, and I can not find the information I had on that undocumented CS option to use ClamWin or Clam Sentinel or both for Sentinel scanning. I got a new computer about 6 months ago, and I think the information was on it. I may have also put something about it on the ClamWin forums or on the Clam Sentinel web site. The Clam Sentinel configuration file may have something about a scanning opton. Seems like the default for both CS and CW was 0 (zero), and there were options for...
-
Hi robert. I wish you had received my message two weeks ago. It seems to show me that it is waiting for moderator verification. Coming back, I'd be happy to send you the source code. Tell me what you would like, email, torrent or maybe something else. I'm open. As for CS and CW itself, I'm a very basic programmer and I can't tell you much about it. I agree that it is possible to disable CS heuristics (which is more difficult) and disable CW scanning (easier). Clam Sentinel works in such a way that...
-
Hello Lukas: Yes, I would like the source code, if it is not too much trouble. I know that there is an undocumented CS option to use either ClamWin or Sentinel's heuristics or both, and the default is set to both. I will check my CS notes and get back to you later today. Do you think anything could be done with ClamWin from Python--maybe a GUI with some additional functionality? Regards, Robert Scroggins On Wed, Aug 30, 2023, 12:48 PM Lukas ksexvedd@users.sourceforge.net wrote: Hi robert. I don't...
-
Hi robert. I don't know if you don't have time to answer or you're just bored with the sentinental topic. But if you want, I will be happy to send you the source zip of the sentinental. I recently downloaded in a very hard way from source forge. Generally, I wonder if it would be possible to force CS to use only clamav. Especially the latest version. He's finally using his engine. I doubt that clamwin will ever be updated and from what I know newer versions of clamav have much faster signatures....
-
Hello, due to the inability to post and create new posts on the clamwin forum, I would like to help loyal users of clam sentinel and clamwin. The newest ClamAV engine used by ClamWin is version 0.103.2. This version is outdated but still supports downloading signatures from the ClamAV server. Unfortunately, most Windows users may have experienced errors after installing ClamWin and downloading signature number 340. My solution is that the signatures downloaded with the clamwin installer are somehow...
-
Hello, due to the inability to post and create new posts on the clamwin forum, I would like to help loyal users of clam sentinel and clamwin. The newest ClamAV engine used by ClamWin is version 0.103.2. This version is outdated but still supports downloading signatures from the ClamAV server. Unfortunately, most Windows users may have experienced errors after installing ClamWin and downloading signature number 340. My solution is that the signatures downloaded with the clamwin installer are somehow...
-
Post awaiting moderation. :/
-
Hello Lukas: Andrea just used ClamWin for scanning. I always assumed he used a permanent cache for both signatures and any custom user file extensions. I use Lenox Mint mostly, so any Windows viruses are no problem. There are still not many Lennox viruses, and they are mainly for servers. I scan daily with Clam AV. When I helped him develop the heuristics, the heuristic scan was much faster because we looked for a small number of file attributes, not thousands of signatures. He told me that he had...
-
I am impressed with Adrea that he wrote such a professional program *while traveling by train. The GUI for ClamAV is very important because not everyone wants to do everything in cmd and unfortunately you can't manually integrate the latest clamav with clamwin without Alch. As for your second post, I don't quite understand what you're talking about. ClamSentinel transfers signatures from disk to RAM during each scan. I'm not sure but probably these signatures are somehow compressed from about 1.3GB...
-
Hello Lukas: To shorten my previous email, using permanent caches for the virus signatures and extensions to scan will speed up ClamWin. Just dropping the code in ClamWin to delete the caches when a scan quits may work--I'm not sure. You would lose the caches though when the computer is turned off, and the first scan after turning it on again would be slow. I don't know what to do about heavy resource use though. Someone once said to make ClamWin a Windows service to fix this. There are some posts...
-
Hello Lukus: Andrea is a professional programmer who works for a university near Venice. He wrote Clam Sentinel in a few days while commuting on the train into Venice. ClamWin is mostly Clam AV with a GUI and some accommodations for running on Windows, Clam Sentinel is mostly ClamWin with permanent caches for the virus signatures and extensions to scan instead of dropping them after scanning. Andrea told me that Alch could use the Sentinel code to make ClamWin better, but, as I said, Alch isn't a...
-
An interesting story. The history of ClamAV itself is quite interesting because it is an old engine probably created before 2000. Anyway, if you say that Alch did not fully create the CW code then who must Adrea be if he made such an advanced program himself, well with your help what beta tester . Too bad you didn't meet him in person. I'm sorry that I've only been interested in open source software, including cw and cs, for about a year, and I couldn't get to know their history. When it comes to...
-
ClamWin was actually started in 2006, I believe. There was someone else working with Alch then who did some programming, but they basically made the Clam AV code able to run in Windows and added a GUI to it. He was there for about 2 years. Alch is good at putting things together, but he doesn't seem to be a programmer. Any time ClamWin needs some substantial programming, he has gotten or tried to get a qualified programmer. I started using ClamWin when the AVs started dropping support for Win 98....
-
Interesting that clamwin has been around since 1998. I myself used and used for my computer and home server MS Essential Security but since I discovered how much data microsoft can collect on running on windows I have made every effort to block network traffic and microsoft services. Also I wanted to move to LX Mint, but I'll be honest that windows 7 is such an eyesore for me. Coming back, you have been posting a lot of selfless posts on security issues on CS and CW forums. I like your attitude very...
-
Hello Lukas: Thanks for being a loyal user. I used Clamwin from July 1998 until about 2 years ago and Sentinel from 2012 until 2017. I still have ClamWin on my Windows computer but don't use it, relying upon MS Defender instead. I use Linux Mint more than Windows now. I have been unable to get on the ClamWin forum for a while. Alch may have dropped me from it due to my posts. He is not really an antivirus person, and I am hardcore AV. Regards, Robert Scroggins On Fri, Aug 11, 2023, 9:41 AM Lukas...
-
I know very well that there is no support from Alch and Adrea. But even so, their programs still work and are useful. I saw yesterday that the clamwin forum is back. Perhaps Alch will decide to release clamwin 1.0 someday and will use the CS code for real-time protection. Recently I did a clamwin scan of the entire disk because I had nothing better to do and it detected firefox.exe just a little different. When I scanned it with virustotal, it turned out to be heavy spyware. I've scanned with other...
-
Both ClamWin and Clam Sentinel have outlived their usefulness. They have not really had much improvement in years. Andrea Russo and I quit the Clam Sentinel project in 2012. The viruses did not quit, and they have been improved greatly. Clam Win is on its last legs. Developer Alch has only passed through a few very basic improvements made by the Clam AV project, which is still active and has also been greatly improved. He has not passed any Clam AV code through to the ClamWin code in over a year....
-
Dear Mr. Robert, the Clam Sentinel is still alive and well! Despite its age, people still download and use it as you can see from source forge. It further integrates well with clamwin and complements it. As well as with ClamAV signatures. Long live the last bastion of free software!
-
Robert Scroggins 12:05 PM (1 hour ago) to me Hello: There will be no more changes to Clam Sentinel. It is dead! ClamWin is also nearly dead too! It's time to move on to another AV that provides better protection than ClamSentinel/ClamWin. For free AVs, I recommend Windows Defender, Fortinet's Forticlient, or Kaspersky's free version. For paid AVs, I recommend Emsisoft, Kaspersky, or Bitdefender. Clam Sentinel was discontinued in 2014, and Andrea Russo has no further desire to work on it. The ClamWin...
-
lwc posted a comment on ticket #12
I'm willing to settle for the basic function of scanning new files I download manually... How many signatures do other leading antiruses roughly release every day?
-
Hello: Clam Sentinel uses ClamWin to scan with the ClamWin signatures, but before the ClamWin scan, Sentinel performs a heuristic scan with its own engine. The heuristic scan is very fast and does not depend upon ClamWin signatures. The heuristics look at Shannon entropy, the PE file header, file size, file location and several characteristics of malware that was being used during 2013-2014. Malware has changed since 2014, however. Most of it is very professional now, and it uses infection techniques/methods...
-
What do you mean "Clam Sentinel is unable to detect most of the malware since 2014"? Clam Sentinel is not an an antivirus, ClamWin is. Sentinel is just a way to launch ClamWin to scan new files. All we ask is to only launch Sentinel for specific folders.
-
Hello: Clam Sentinel was discontinued back in 2014. There has been no further development since then, and as far as I know, there will be no more development. Clam Sentinel is unable to detect most of the malware since 2014. You should use another real-time antivirus. Further development of ClamWin is also in doubt. The main developer, Alch, has been unable/unwilling to prepare program updates since 2018 for over a year now. Regards, Robert Scroggins On Sat, Oct 12, 2019 at 4:03 AM dma dmasc@users.sourceforge.net...
-
dma modified a comment on ticket #12
I would also like this feature to be implemented, being able to choose directories that only have to be monitored for scanning. Because it's not conceivable to exclude all folders adjacent to Firefox folder one by one in user files directory, for example. (yes, 6 years after)
-
I would also like this feature to be implemented, being able to choose directories that only have to be monitored for scanning. Because it's not conceivable to exclude all folders adjacent to Firefox folder one by one in user files directory, for example.
-
Hello Mark: Thanks for using Clam Sentinel; however, you are about 5 years too late! The project was discontinued in 2014. Developer Andrea Russo of Italy abandoned it. I worked with him on the Clam Sentinel heuristics, and I have been checking the web site now and then. Clam Sentinel has its own heuristic detections to generically detect Windows malware, and it also uses ClamWin and its signature database to detect specific malware. The heuristics are for malware that existed from 2012 to 2014,...
-
Mark Miller posted a comment on a wiki page
This software is just what I was looking for - open source/privacy respecting/real time. A few questions: 1) I have selected "Detect suspicious files only". I have gotten on several occassions numerous notices about this: "Modified Folder Folder: C:\Users[me]\AppData\Local\Microsoft\Windows\UPPS\ File: UPPS.bin [Time of day]" I haven't been able to find out what this file is or why it is suspicious. How do I verify it? The popup warning on the lower right will say "Verify" or something like that,...
-
Brian Trusz created ticket #29
404: http://clamsentinel.sourceforge.net/Version.php
-
Hello: Very good! The real-time (resident) module is the most important one. I do not think it needs any change right now. The heuristics module needs some change (add detection of PE file sections that have entropy of 95% or greater, add heuristic detection of certain JavaScript files or certain JavaScript code in html files). The heuristic scoring method needs to be improved. The memory scan needs to be discarded--users can do a memory scan with ClamWin if they want to, and the ClamWin scan is...
-
Eduardo Oliveira posted a comment on a wiki page
Hello Ubirajara, I get the ClamSentinel source code through CVS: Download SmartCVS at http://www.syntevo.com/smartcvs/ Extract the file and open the executable "smartcvs.exe" at the "bin" directory. Choose the first option (Check out project from repository) and click on "OK" button. Into "Repository" page, click on "Manage" button. Click into "Add" button. The info necessary to connect is available at https://sourceforge.net/p/clamsentinel/code/ . CVS repositories from SourceForge is now read-only....
-
Hello: I have tried to sent you the files I have several times--as a 7zip file, a tarball file, and a Gzip file, but both Gmail and Yahoo Mail treat them as malicious and do not deliver them. Do you have a file repository somewhere on the web that I can sent them to so that you can get them from there? Regards, Robert Scroggins On Wed, Jan 17, 2018 at 10:17 AM, Ubirajara Bandeira Jr kokbira@users.sf.net wrote: kokbira@gmail.com 2017-12-12 14:35 GMT-03:00 Robert Scroggins sentinelguy@users.sf.net:...
-
Ubirajara Bandeira Jr posted a comment on a wiki page
kokbira@gmail.com 2017-12-12 14:35 GMT-03:00 Robert Scroggins sentinelguy@users.sf.net: Hello: If you will give me another email address, I will send you a 7-zip file of the Clam Sentinel code. Regards, Robert Scroggins On Tue, Dec 12, 2017 at 8:55 AM, Ubirajara Bandeira Jr < kokbira@users.sf.net wrote: No, I am talking about ClamSentinel, not ClamWin. ClamSentinel is so interesting because it makes ClamWin do a proactive protection, but it would be improved to do more things and merged with ClamWin...
-
Hello: If you will give me another email address, I will send you a 7-zip file of the Clam Sentinel code. Regards, Robert Scroggins On Tue, Dec 12, 2017 at 8:55 AM, Ubirajara Bandeira Jr <kokbira@users.sf.net wrote: No, I am talking about ClamSentinel, not ClamWin. ClamSentinel is so interesting because it makes ClamWin do a proactive protection, but it would be improved to do more things and merged with ClamWin to become a complete solution. I would like to see the ClamSentinel code to see if I...
-
No, I am talking about ClamSentinel, not ClamWin. ClamSentinel is so interesting because it makes ClamWin do a proactive protection, but it would be improved to do more things and merged with ClamWin to become a complete solution. I would like to see the ClamSentinel code to see if I can contribute in some way. 2017-11-28 12:59 GMT-03:00 Robert Scroggins sentinelguy@users.sf.net: Sorry.. I thought you were asking about the ClamWin source code. You can read about the Clam Sentinel source code by looking...
-
Sorry.. I thought you were asking about the ClamWin source code. You can read about the Clam Sentinel source code by looking at the Code item in the main menu. You had better hurry because Source Forge is soon making a change--buy the end of November, I think. Regards, Robert Scroggins On Mon, Nov 27, 2017 at 9:47 AM, Robert Scroggins sentinelguy@users.sf.net wrote: Hello: Check the ClamWin FAQ link on the main web page for info regarding source code download. You could also do a search on the ClamWin...
-
Hello: Check the ClamWin FAQ link on the main web page for info regarding source code download. You could also do a search on the ClamWin site for "source code" "source code download" or something like that. If all else fails, get in touch with Alch/Sherpya, ClamWin developers, and ask them via the contact info on the main web page. If you come up with any improvements, be sure to let them know about it so other users can benefit. Thanks for being a ClamWin user! Regards, Bob Scroggins On Mon, Nov...
-
Where can I download the source code?
-
It is time to let Clam Sentinel go. It was written in 2012 when executable Windows malware was the predominant type of malware, but executable malware has changed, and Clam Sentinel can not detect much of the the current Windows executable malware. In 2017 the majority of malware is javascript malware, which Clam Sentinel can not detect either. Clam Sentinel therefore has to rely mostly upon ClamWin's malware signatures, which are developed by the Clam AV project. Clam AV does not currently produce...
-
Clam Sentinel no longer works on Windows 10 computers. Also, its heuristics are designed to detect malware that is in executable Windows PE files, but most malware now initially uses script files--like javascript, power shell, and command script, so it no longer provides good real-time protecton. Finally, with the developer gone (Andrea Russo), we can not provide adeqiuate user support. I recommend you use another antivirus. Regards, Robert Scroggins On Sun, Oct 8, 2017 at 11:09 PM, mabra manfbraun@users.sf.net...
-
mabra created ticket #21
Invalid commandline option - looks not doing onlice scan
-
Here Is How To Protect Yourself From 90% Of Computer Viruses Keep Windows updated--use automatic updates. Keep important software Updated--Office software and web-facing software like PDF/chat/etc.). Run a real-time AV scanner that updates often (use ClamWin/Sentinel for 2nd opinion scans). Backup important files (documents/photos/music/data) a couple of times each month on USB. Verify links by hovering your mouse over them to see if it agrees to the written link. Do not download unknown files--ask...
-
Hello: The downloaded .exe file from the Clam Sentinel web site has everything you need to install Clam Sentinel. However, ClamWin must be installed before Clam Sentinel can be properly installed. I would not recommend you install Clam Sentinel on a Windows 10 machine. I have tried it on my wife's Win 10 computer and it works okay with just an occasional program exit, but Windows 10 has much better security already with the Windows Defender default antivirus. You do not need Clam Sentinel. If you...
-
Alexandre Vallières posted a comment on ticket #13
Oh and also I have Windows 10, so maybe that's an issue...
-
I tried so hard to do as you say (and I know I'm a little late), but my computer is brand new, so I doubt it's the problem, and it won't open the document you attached even after renaming to old Sentinel. I can't install my cloud server on my laptop and I can't even uninstall Sentinel to do it. Please help.
-
There was a widespread notice of new ransomware on May 12 that took advantage of a vulnerability in Windows computers. The vulnerability had been patched a month ago by Microsoft. Thousands of unpatched computers were infected. The ransomware spread rapidly like a worm by taking advantage of the vulnerability on unpatched computers and older computers (like Windows XP) for which Microsoft stopped patching some time ago. The malware scans a computer and if it is vulnerable, it contacts a certain web...
-
Ransomware Update It appears that in 2017 the smart ransomware authors plan to attack...
-
No antivirus can detect 100% of all malware--even if does detect it on a test. You...
-
2017 Security Is Up To Us! The weakest link in the security chain is, and always...
-
Detection and remediation of malware are equally important. Detection can prevent...
-
Exploits kits consist of malware that takes advantage of vulnerabilities in popular...
-
Malware has now gotten to the point that it is an epidemic. However, it still primarily...
-
Hello: I am using Forticlient on my home computer, so I don't have any problems like...
-
websafe posted a comment on discussion Open Discussion
Hello Robert, thank you for your answer. I'm using Forticlient on some machines too,...
-
Hello: Yes, the Clam Sentinel Project has been discontinued as of around July 2014....
-
Hello :-) Is this project still alive? I see the last update was 2014-07-18. The...
-
There is no one available to do any further work on Clam Sentinel. The ClamWin people...
-
Even though so-called "fileless" malware itself is not in a traditional file, it...
-
<REDACTED> created ticket #16
Use clamd daemon for scanning
-
HOW TO BE SAFE ON THE WORLD WIDE WEB Scan all files downloaded (whether from email...
-
I don't see any problem with Clam Sentinel, so I don't think I can help you. Regards,...
-
InfoLibre created ticket #28
Virus or false positive ?
-
In addition to ransomware, Malvertising is another type of rampant malware. Malvertising,...
-
Ransom viruses are the hottest malware right now, and it looks like they will be...
-
Other new extensions that are being used (especially in ransomware) besides ps1 are...
-
Mannard modified a comment on ticket #27
Here in the Crash Dump.. My system specs: Q6850, 4GB PC9600, EVGA 780i motherboard,...
-
Here in the Crash Dump
-
ClamSentinel Memory Scan CRASHES with new version of Clamwin (v0.99)
-
Some malware, expecially malware distributed by exploit kits (ransomeware primarily)...
-
Hello Fred: Andrea Russo is no longer supporting Clam Sentinel so my answer was the...
-
FredFF posted a comment on ticket #20
Hi Robert, Thanks for your kind and quick answer, even if it's not really conclusive....
-
Thank you for using Clam Sentinel. I do not know of any way to configure proxy settings...
-
how to configure proxy settings in clamsentinel
-
Clam Sentinel was never designed for use with DOS. There have also been some problems...
-
mkysoft® software created ticket #26
Console screen on XP problem
-
Sentinel automatically invokes the current ClamWin DB on a periodic basis, so the...
-
attilathebun posted a comment on discussion Help
ClamWin is a completely manual process/program - requires virus db to be updated...
-
For the Clam Sentinel real-time scan, the system monitor looks at files that have...
-
If Clam Sentinel gives you too many false positive detections on DLL files in your...
-
If Clam Sentinel gives you too many false positive detections on DLL files in your...
-
If Clam Sentinel gives you too many false positive detections on DLL files in your...
-
Hello Pedro: I'm sure that Andrea could change his code to accommodate a bunch of...
-
pedro sencha posted a comment on discussion Help
hello, thanks for the infos. changing the path to f:\ClamWinPortable\Data\settings...
-
Please read the Clam Sentinel Simple Guide about using Clam Sentinel and ClamWin...
-
hello, i have problems running clamsentinel 1.22 together with clamwin portable....
-
kennedy cheskaki modified a comment on discussion Open Discussion
Unfortunately since our topic is not related to ClamSentinel,this will have to be...
-
Unfortunately since our topic is not related to ClamSentinel,this will have to be...
1 >