ClamWin 'error' removes most of Windows

[hazelnut]

ClamWin users are having a long night

 

http://www.h-online.com/security/news/item/Free-ClamWin-virus-scanner-moves-most-of-Windows-into-quarantine-1139430.html

 

ClamWin forum

 

http://forums.clamwin.com/viewtopic.php?t=3094&postdays=0&postorder=asc&start=0

[Andavari]

I just updated the portable edition, but I don't use it for full system scans - it's just too slow for that.

 

Hopefully they change the behaviour to not limit the logs to just 1Mbyte for any future disasters. Hence the reason to image the hard disk, since any AV can go loopy with a bad update.

[Aethec]

There actually are people using ClamWin as their primary AV solution? If I remember correctly, they still haven't implemented real-time scanning of files...

[Andavari]

It doesn't have a real-time scanner, which is what I like about it since it won't conflict with a resident av program like MSE, Avast, AntiVir, AVG, etc.

[login123]

There actually are people using ClamWin as their primary AV solution? If I remember correctly, they still haven't implemented real-time scanning of files...

 

I keep it up to date for a fallback if others fail. Try it out sometimes, to be sure it works.

FWIW, I always run such scans with a virtualizer running, like Returnil, Time Freeze, or Powershadow. Even with the apps I trust, like Avast!. If something is found, go back with the virtualizer off and fix it.

 

I know that's the long way around, but it would have saved those poor clamwinners.

[Andavari]

What would've also saved them is to configure it to 'Report Only' instead of 'Move To Quarantine Folder'. At least in the PortableApps.com portable version it's default setting is 'Report Only'. I've never let an antivirus do anything automatically when it comes to on-demand scanning.

[login123]

Of course. Been so long since I needed it, I'd forgotten about it.

[Nergal]

Yup I only use clamwin as a portable on my stick for when the nasty doctors download Fake Antivirus' on the Work Tablets <Grumbles and goes back to nuking a computer back to factory >