During a scan with ClamWin Portable, (I think I originally got from a portable app third party website), a clamtmp file in the Appdata\Local\Temp gets flagged as a Trojan:Win32/Orsam!rts

So, I deleted that version, and went directly to the ClamWin site to download, and created my own portable, but I still get the MSE flag, and it deletes the suspected bad file.






Is MSE wrong? Or maybe my clamwin program is really corrupt?

Thanks

MSSE is wrong. The temp file just contains a ClamWin virus signature--not the virus itself. As ClamWin scans, it puts temp files on the computer, and it removes them after the scan, but in this case, MSSE just kicked in and spotted the signature before removal. Antiviruses can sometimes have similar signatures for a virus. That is what happened in this case.

You might see if you can exclude the .clamtmp type file from MSSE scans in the future. I also like to exclude ClamWin's quarantine directory and its database directory from my other AV's scans to prevent any similarities there. And, I also exclude the other AV's quarantine directory from ClamWin's scans.

Regards,

Thanks, Bob I am very relieved.