Hi, I was wondering if you can set a scheduled scan for the computer memory or is this not necessary? Also I read in the help files that if you have multiuser accounts or new user accounts on your computer you should copy the clamwin config file, how do I do that and where exactly do I copy it to?
Any and all info is a great help and greatly appreciated, Thanks.

The only way to schedule a memory scan is to include it in another scheduled scan. Just tick the little Scan Computer Programs In Computer Memory block. In the General Preferences, you can elect to have ClamWin unload infected programs from memory. If you get an infection in memory, be sure to scan the Windows directory--usually the System32 folder--that is where the original infected program is--unless the malware was just infected into memory.

On Vista, the ClamWin config file is located at C:\Users\Bob\AppData\Roaming\.clamwin and should be somewhere similar in Windows 7. On XP, it should probably be somewhere in the Documents & settings folders--for the Default/primary user. I don't know about Windows 98--it's been too long ago!

Regards,

We have more than one computer ;1 original and 2 others running on thin client...our computer keeps picking up the same problem...the program tells us that it is "scanning" for viruses, but the program is actualy the virus, so is there a way to tell which thin client its coming from and what program is the best for STOPPING this?

Thanks,
Candice

Look at the programs you have installed via Control Panel, Programs and Features--you may be able to find and uninstall the fake antivirus program from there.

If you can use Windows Task Manger, you can see what programs/processes are running on a computer. You can investigate each one (Google the program/process name) until you find the fake antivirus and then stop it via Task Manager. You will then have to scan your computer with an updated antivirus program to physically remove the fake antivirus.

It might be best, however, to just scan all computers with Malwarebytes' free antimalware program. It does a pretty good job of finding and removing common malware.

Some viruses can't hide in Safe Mode and are easier to find. To get into Windows Safe Mode (hit F8 every second or so when you start up until you get a menu. At the menu, choose Safe Mode With Networking, which will let you update Malwarebytes or your regular antivirus scanner without any problems, and then do a scan of the entire computer with Malwarebytes or your regular AV.

Regards,

Thanks GuitarBob!
I have been able to stop the virus from running via task manager and have found it to remove!! YEAH! Now to see if updating the malwarebytes and antivirus scanner will keep it away for longer than a week this time !!

candiceslegacy

I'm glad you had some success. You might add a post to this thread so others will know exactly what you did to remove the virus from your computer and name the virus file/process (if you remember it). Also, if you rememer the name, do some Googling on the web to find out more about the virus.

Sometimes a virus is dropped by another file which can reinstall the original virus. I suggest you keep ClamWin updated (set it for hourly updates and do a daily scan of your Windows and Users or Documents/Settings folders. That is where most viruses hide. If it comes back, do a scan in Safe Mode as quickly as possible. if ClamWin is your only antivirus, get the Clam Sentinel program and read the Simple Guide before you use it too much.

Regards,