I recently rebooted my Win2k3 x86 server. When I did, a number of applications failed to start, amoung them, MagicJack, WSUS, MSSQL 2000, 2005 & 2008, FaxTalk Pro, Gillware Remote Backup, Adaptec Storage Manager, Intel LANDesk Manager, Sonicwall GVPN Client. All of these programs or services failed because within the past week or 2, ClamWin decided that some of the files associated with these processes were malware of some sort.

I am now stuck with trying to correct my system because the "infected" file restore process, from what I've been able to piece together, is cumbersome at best.

Obviously I must take some responsibility for not viewing the logs closely enough, but with so many legitimate programs being deemed malware, I think much of the real problem sits with ClamWin.

I think ClamWin has accepted responsibility for the recent problem with Windows false positives. They worked with the users to help to the extent possible. ClamWin already has false positive protection for signed Windows files on Vista and Windows 7 computers. It has always been recommended that users leave the infected files option set to the default of Report only instead of Quarantine or Remove. Additionally, users can select to receive an email alert upon detection, which might be a good option for networked installations instead of Quarantine/Remove.

Alch has said that the next ClamWin version will have some sort of restore from quarantine function built into the program.

Regards,