[clamav-users] Weird windowsx64 install issues. Unable to install because installer missing +other questions

Micah Snyder (micasnyd) micasnyd at cisco.com
Mon Jul 16 09:59:52 EDT 2018


Hi cryofruit,

Thanks for trying ClamAV!  clamav-users is the correct address.  Be sure that you've subscribed so you see responses.  I manually CC'd yo on this email to be sure you get it.

Nevermind Eric's comments about the redistributable.  He's correct in that it is required for some systems -- but not Windows 10 and it's not the issue you're facing right now.

For Windows we provided 2 different ClamAV packages.

  *   clamav-0.100.1-win-x64.zip<http://www.clamav.net/downloads/production/clamav-0.100.1-win-x64.zip> - Provides you with a setup.exe installer to place ClamAV in "C:/Program Files" and will install the redistributables if required.
  *   clamav-0.100.1-win-x64-portable.zip<http://www.clamav.net/downloads/production/clamav-0.100.1-win-x64-portable.zip> This package lets you unzip ClamAV to any directory and run it without having to run an installer.  For this package, the redistributable dlls are included in the directory so you don't have to install them.

I will admit that ClamAV's UX needs some improvements, particularly on Windows.  You'll find that it is very clearly a port of a Unix command-line application.  What this means is you'll want to run ClamAV programs from a terminal (either cmd.exe, PowerShell, or Bash for Windows).  If you used the ClamAV installer and your files are installed to "C:/Program Files/ClamAV" you'll need to run your terminal "As Administrator<http://www.tomshardware.com/forum/5616-63-explain-administrator-thing>" so that freshclam has permissions needed to copy files to the database directory.

To answer your question about antivirus signatures:  No, ClamAV is not packaged with the signature database.

On a new ClamAV install, your first order of business will be to create configuration files for freshclam and optionally for clamd.  Freshclam is the app to download the signature database.
A note regarding your non-internet connected machine(s):  ClamAV users that won't have internet access can manually obtain the databases from the Virus Database section of  http://www.clamav.net/downloads.
If you have a larger install-base in your air-gapped network, you may wish to set up a a private mirror on your network so ClamAV installs can point freshclam at your private mirror to get signature updates.

On Windows, sample configuration files are found in the ClamAV install directory under conf_examples.  Copy them up one level so they're next to your other clamav files, and change the extension to remove the ".sample".  Then edit each conf file and remove the "Example" line.  Once this is done, freshclam can be used to download the signature database and clamd may be started.  If you're manually downloading the signature databases, you will need to drop them in the database directory.  On Windows, the directory is named "database".

Ok so assuming you've installed ClamAV and have obtained the signature database one way or another, you'll be able to run scans.  To run a scan you have two options.  Again, open a terminal or two to use the following progams:

  *   clamscan.exe:
     *   You can run clamscan against a file or directory to load the database and run an immediate scan.  Loading the database takes a few moments, but after that it will scan the files quickly.
  *   clamd.exe + clamdscan.exe:
     *   You run clamd.exe to load the database, and then
     *   open a 2nd terminal to use clamdscan.exe to select files that clamd.exe will scan.  This allows you to more quickly scan specific files so you don't have to load the database for each call to clamdscan.exe.

Running scans with ClamAV is a very manual process.  Many users set up some sort of automation to perform both updates and scans on a schedule.  ClamAV doesn't currently provide any mechanism for scan automation so it's up to you to select a tool to automate scanning.

If you have any additional questions about how to use ClamAV, feel free to ask.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Jul 15, 2018, at 7:53 PM, cryofruit at keemail.me<mailto:cryofruit at keemail.me> wrote:

(Forgive me If I'm making a mistake here, but I never received any replies for my message the first time!) Am I supposed to send my questions to
clamav-users-request at lists.clamav.net<mailto:clamav-users-request at lists.clamav.net>
OR clamav-users-bounces at lists.clamav.net<mailto:clamav-users-bounces at lists.clamav.net>
OR clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
??
Again I apologize. This was not explained very clearly on the instructions sign up page and I only recently noticed the difference when I got some emails from other users asking others for help and noticed it wasn't the same as the "requests" email, Now I'm totally lost here.

This is my original email asking for help.

I recently downloaded the Windows64 version but no matter what icon I click after unzipping the package, Windows10 doesn't seem to want to do anything with it. A black window that looks like command prompt quickly flashes the screen and exits itself out again before anything can happen. What is the correct way to install Windows64 Clamav on windows 10? Yes, I read the FAQ.

ClamAV.msi - base package for clamav, an anti-virus utility for Windows
How to Install

    simple mode: doubleclick the MSI installer package
    command line (displays only a confirmation dialog at the end): msiexec /i clamAV.msi /qr

There is no MSI installer package included after downloading clamav-0.100.1-win-x64-portable.zip


When you download a copy of Clamav (specifically Win64) Does that download contain all the most recent official and unofficial virus signatures? The computer I'm installing it or using it on will likely not be internet capable at any point in the future, if ever. I know this also sounds silly because then what would be the point of an antivirus? But I guess it's just my need to try and be as safe as possible overriding some of my logic there. The thing is that I wont be able to install updates. If Clamav does contain the most recent official and unofficial signatures, should I uninstall and reinstall the newest version every time? Does Clamav offer portable antivirus signature update packages that I can make Clamav "eat"? That's if I ever get it working of course.

Thank you for reading and Thank you for your help.
_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.clamav.net/pipermail/clamav-users/attachments/20180716/539962a6/attachment.html>


More information about the clamav-users mailing list