ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Problem to Clamwin
Huamin


Joined: 18 Jul 2018
Posts: 2
Reply with quote
Hi,
Is there any better Anti-virus tool in Windows server? In the attached screenshot below, would Clamwin further totally remove the virus or not?

https://postimg.cc/image/u0ixgbai5/
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4376
Location: USA
Reply with quote
ClamWin can remove/quarantine/report detected viruses depending upon how you have set the infected file option. You can change the option via Tools, Preferences, General tab. It is unusual to have more than 1 or 2 viruses detected in one scan. The Clam AV scan engine used by ClamWin is subject to false positive detections, so I suggest that you get a copy of Malwarebytes Antimalware Free (MBAM) and do a scan with it. Also get a copy of the free Kaspersky TDSS Killer, which will detect/remove common hidden rootkit malware. MBAM has to be installed on a computer, but you can run TDSS Killer from a USB. If you do not find any viruses, you can "whitelist" or exclude the files from ClamWin scans via Tools, Preferences, Filters, Exclude Matching Filenames. As a final check, if you do not find any viruses, get into Windows Safe Mode, and run MBAM and TDSS scans from there. Many viruses can be detected in Safe Mode.

The ClamWin developers suggest that you use ClamWin as a second opinion/backup scanner to a real-time AV like Windows Defender/Security Essentials, Avira, Avast, or AVG (they are all free for personal use).

Thanks for using ClamWin!

Regards,
View user's profileSend private message
Huamin


Joined: 18 Jul 2018
Posts: 2
Reply with quote
Dear,
In Clamwin, I get

https://postimg.cc/image/apik4gp99/

but in Malwarebytes, I get no problem like

https://postimg.cc/image/vz66fdapp/

Is there still virus? If yes, how to completely remove that?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4376
Location: USA
Reply with quote
When you get many detections for the same virus, it is often a false positive detection. That is why I suggested that you use Malwarebytes to verify/clean the detections. If Malwarebytes does not detect an exploit, it is a false detection by ClamWin, so you can whitelist the files in ClamWin that are falsely detected. Instead of whitelisting, you could upload one of the files to Virus Total, which will tell Clam AV about the false detection so they can change the Clam AV signature. ClamWin will then get the corrected signature.

Keep Malwarebytes installed and do a daily scan with it. Also, run one of the AVs that are free for personal use. Keep ClamWin for a "second opinion" scanner.

Regards,
View user's profileSend private message
Problem to Clamwin
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic