When I run ClamWin I get probably 50 warnings saying that a particular file was not accessable.
This renders the scan useless. What to do?
Bruce

It is normal for some files to be not accessable to ClamWin. If it happens all the time, and you are sure the file is not infected, exclude it from ClamWin scans via the Configure, Filters, Exclude Matching Filenames option.

Regards,

how can I be sure the files have not been infected by a hacker?

Most permission denied files are okay/not infected. That is certainly a pretty big flag, and viruses don't like to be flagged! They would more than likely hide the file via rootkit or by classifying the file as a hidden protected system file.

You can always upload a file to Jotti at https://virusscan.jotti.org/en or to Virus Total at https://www.virustotal.com/ on the web. Either service will scan your files (one at a time) with multiple AV programs, including Clam AV, which furnishes the scan engine and signature database used by ClamWin. If several AVs say it is infected, it probably is. If more than 10 of AVs see an infection, there is a good chance (not a certailnty though) of an infection. I have 5 "trigger" AVs which I use as an indicatior: AntiVir, Bitdefender, Kaspersky, NOD32, and Sophos. If 2 of these AVs say something is infected, I will believe it (in most cases).

Regards,

thanks for your help - I think I'm going to have well over 100 of these files, "permission denied".

That is a lot, but I guess it is on multiple machines, right? Even on one machine, you can get a lot of permission denied files, depending upon what is running when the scan is active. You might upload a few of the most common files to Jotti/Virus Total for a check.

Regards,

thanks again for your comments and have a gr8 day!!

thanx for the hint. i'm running NOD32 antivirus and when i check my system there plenty of files with denied access. now i'll use these sites to check files if i'm not sure.



https://www.reema.fr/wakka.php?wiki=mobilebooster
https://ecodiag.eu/wakka.php?wiki=MobilePhoneSignalBooster

I too have had such issues with Clam win. I would recommend you to not worry regarding the warnings since some files cannot be accessed by Clam win. I would also like to suggest you to not take the false positives seriously since certain versions do indicate of it.Its always good to use emergency data recovery softwares, to fight the unexpected happenings, there are many top companies like https://www.datanumen.com/aexr Datanumen,data recovery etc are providing such softwares.

If one ClamWin user has a false positive, then many others will also have it, so you should report all false positives to Clam AV at https://www.clamav.net/lang/en/sendvirus/ on the web. If you are using Clam Sentinel, Clam can not do anything about the "suspicious files" falsely-detected ("infected files" that are falsely-detected should still be reported to Clam. The Sentinel user can whitelist his own falsely-detected "suspicious" files, which rely on Sentinel's own heuristics--not Clam's signatures.

Regards,