[TBClamWin] The Bat ClamWin plugin

[Mancubus]

Hi!
Thanks for the new version!

Well, I tested it quickly and at least it says OK in the Status column, but I can't check if it really works, it doesn't create any logs, or I can't find them.

Several small tips:

1. My tbclamwin.conf looks like this:

[ClamAV]
clamscan = ..\..\..\Security\ClamWin\App\clamwin\bin\ClamWin.exe
database = ..\..\..\Security\ClamWin\Data\db\

i.e., you have to put relative paths in both lines.

2. Seems like the 'standard' ClamWin has the different file structure, because portable one doesn't have 'clamscan.exe' file. I put 'ClamWin.exe' there, in the first line.

How can I check does it really scans mail?

[Mark0]

There should be no problems for the relative paths & the different EXE name. TBClamWin use what it get from the configuration files as is.

A quick way to check if it does scan & catch the viruses, is to enable the scanning of outgoing attachments, and then write a test message including the EICAR test file. Just save the message to the out box, and if all it's working it should fire an appropriate warning.

Bye!

[Mancubus]

I just made a simple test sending myself a letter with EICAR attachment as you've said.

With 'clamwin.exe' it said that ClamWin isn't configured. It's easy - that's why there's a launcher for it, without it clamwin doesn't know where to find it's base and all.

I changed the first line to look like

clamscan = ..\..\..\Security\ClamWin\ClamWinPortable.exe

And in result it just lauched and launched a lot of copies of ClamWin and Voyager told that antivirus is unable to scan the file.

So, unfortunately, it doesn't work as supposed to.

[Mark0]

I think you need to point it to the ClamScan.exe in the bin folder.
Also, note that when it will be executed, the current path will probably be the one of the The Bat! executable, so be sure that the relative path is correct.

Bye!

[Mancubus]

Sorry, I don't know how I missed clamscan.exe.
Well, now conf file looks like

[ClamAV]
clamscan = ..\..\..\Security\ClamWin\App\clamwin\bin\clamscan.exe
database = ..\..\..\Security\ClamWin\Data\db\

, plugin loads OK, but it doesn't check mail in fact - the letter successfully reaches the server and there it's declined by server's antivirus.

[Mark0]

I would try to specify full paths in the .conf file, just to be sure.
Try also to remove the last "\" on the database key. TBClamWin use it as is one the .conf file, and maybe the ClamScan doesn't like it.

P.S.
I'm just about leaving for nearly a week; so, while I surely be able to read your feedback, I wont eventually be able to check / do much with the program itself.

Thanks,
Bye!

[Mancubus]

Specifying full path won't work, since, as you understand, the drive letter will be different on each computer and plugin won't work...

Anyway, I tested it with full paths and - it doesn't check :-(

[Nick222]

But where is LOG-file?!?

Don`t work :(

c:\Program Files\The Bat!\Plugins\ClamWin\TBClamWin.bav

c:\Program Files\The Bat!\Plugins\ClamWin\tbclamwin.conf

[ClamAV]
logfile = C:\Program Files\The Bat!\Plugins\ClamWin\TBClamScanLog.txt
clamscan = C:\Program Files\ClamWin\bin\clamscan.exe
database = C:\Documents and Settings\All Users\.clamwin\db