Jump to content
WacoJohn

Immunet Files Flagged By Antivirus Program

Recommended Posts

Immunet 3.0.1.6112 FREE with Clam AV.

 

I don't know if this involves FP or what. I was composing a Gmail email item. I copied some 'copy' from a website into the email. The moment I pasted it, MS Security Essentials popped up that it had blocked some files. Details of the block listed files in C:\Program Files\Immunet\clamav\temp\clamtmp .... 4 files. See attachment.

 

I took a screen shot and the moment I pasted the SCREEN SHOT, MS SE went ahead and REMOVED the files .. with no action from me. I did not tell it to do that .. I WAS going to quarantine them .. but MS SE went ahead and removed them.

 

Edit: After MS SE removed the files, I went ahead and sent the EMAIL item. THEN, I tried to recreate the problem. Started a new email, pasted the same thing as before, ... MS SE did not 'catch' anything the second time. I am unable to recreate the problem.

Edited by WacoJohn

Share this post


Link to post
Share on other sites

Huh, this is the second question about this I've gotten in two days... Millard was able to point me in the right direction though.

 

If you have both the Clam engine and Scan Archived files enabled, Clam extracts any archived files it finds to C:\Program Files\Immunet\clamav\temp\clamtmp\Immunet\clamav\temp\clamtmp and then scan these temp files for virus's. After the scan completes the clamtmp folder is emptied, and if any virus's were found the original archive is also deleted.

 

So what your seeing is MS Security Essentials detecting and quarantining Clam's temp files before Clam has a chance to scan them.

 

I'm not entirely sure what the side effects of deleting files from clamtmp are, but I would recommend adding an exclusion to MS Security Essentials to exclude the entire Immunet folder (i.e. C:\Program Files\Immunet).

Share this post


Link to post
Share on other sites

but I would recommend adding an exclusion to MS Security Essentials to exclude the entire Immunet folder (i.e. C:\Program Files\Immunet).

 

 

Done.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...