ok Bob... hope i am doing this right, cause I have not had enough coffee this morning....LOL... found c: program files\clamwin and 4 files..but they were named a little differently than what you mentioned.. one was main, cant remember the other one I deleted..but the last 2 will not allow me to delete them..says " can't complete the action because file or files open in another action...

I had everything closed..even closed out the screensaver trying to figure out what it was talking about... only thing i had open was explorer... the last 2 files not deleted are:

bin & lib

am i in the right place?? I did try to manually update, and it would not do it..got same error messages again.. so reopened the reports and looked again... appears I was wrong.. the errors were going on well before June.. here is the first on on the report list...


ClamAV update process started at Thu Mar 24 22:28:02 2011
main.cvd is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven)
WARNING: getfile: daily-12698.cdiff not found on remote server (IP: 155.98.64.87)
WARNING: getpatch: Can't download daily-12698.cdiff from database.clamav.net
WARNING: getfile: daily-12698.cdiff not found on remote server (IP: 65.19.179.67)
WARNING: getpatch: Can't download daily-12698.cdiff from database.clamav.net
WARNING: getfile: daily-12698.cdiff not found on remote server (IP: 194.47.250.218)
WARNING: getpatch: Can't download daily-12698.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 12901, sigs: 80271, f-level: 60, builder: guitar)
Downloading bytecode-138.cdiff [100%]
Downloading bytecode-139.cdiff [100%]
Downloading bytecode-140.cdiff [100%]
Downloading bytecode-141.cdiff [100%]
Downloading bytecode-142.cdiff [100%]
bytecode.cld updated (version: 142, sigs: 40, f-level: 60, builder: acab)
Database updated (926525 signatures) from database.clamav.net (IP: 64.142.100.50)

this happens several times until the June postings......

ok, next?? and by the way...thank you so much for putting up with this dummy......

You are doing fine. That last update report from March 24 looked okay. The main database was up-to-date (it will usually be), and there was a difficulty in updating the daily database, but Clamwin tried three different servers and was able to update it from the last server. That is normal sometimes. Clam has many update servers, and they may not all have the latest update at the same time. The bytecode database updated okay. So that update report looks okay.

What doesn't look okay is that first update report you showed me. That looks like a problem with your Domain Name Service (DNS), which is how you get around on the internet. Each internet service provider uses a DNS that is responsible for finding the web pages you want to visit. Can you ask your internet service provider if you connect to the internet via a proxy server? There is some configuration you need to do in ClamWin if that is the case (via the configuration menu, proxy tab).

Regards,

Another possibility is that you are using an older version of ClamWin. I did some Googling, and there are similar problems sometimes with older versions after a main database update. So if you are not using, the latest version of ClamWin-version .97.1, please download it from the ClamWin web site and install it. After installation, you will be given a chance to update the signature database. Do so, and that may fix things if you do not have the latest version.

Regards,

The new version of ClamWin, .97.2, is available.

By the way, all I have in my ClamWin signature database directory are these files: bytecode.cvd, daily.cld, main.cvd, and mirrors.dat. You do not need anything else. I believe you said there were some files in your directory that could not be deleted. That is strange.

Install the new version, and let's see how it goes.

Regards,

i did go into programs and do the "uninstall" of clamwin since i could not get those 2 files to delete.. but weird thing was when i downloaded the newest version, it said i had earlier version still installed??? how can that be if i deleted those files, then did the uninstall??

but still got same results... won't update..same error messages with dns... will contact internet company to check on proxy server..thanks much for your time..will let you know Bob what I find out.

Cat

Hmm. It looks like there was maybe a bad install at some time--or maybe you have 2 versons of ClamWin running around. See if you can uninstall it again and then check on the status before you reinstall it. Let me know how it goes.

Regards,

so where else can i find it on the computer if it is not listed in the programs???

Well, the new version, when installed should write over the old version--if it is/was in the ClamWin folder under the Program Files directory. You chould check the Windows Task Manager program to see if any ClamWin files are active before you reinstall ClamWin. Task Manager shows your programs and processes and is found in C:\Windows\System32\taskmgr.exe on your computer. Look for files that are named clamtray, clamscan, clamwin and freshclam under both the Applications and Processes tab.

Regards,

Well mr Bob.... I did like you suggested, and checked in the task manager..it said it was still running, altho I had deleted 2 of the 4 files, and deleted the clamwin from program files... yet when i did a new download again, I am still getting the same old error message....

I have not had a chance today to sit on the phone and wait for the ACN support guys, but will tomorrow, and see if they are running a proxy server... then will let you know..

thanks so much for all your help...

Cat

Bob, we got the DNS resolver issue taken care of ... they wondered if I had a virus that changed the settings on my system..but it is now working fine thank God....

thanks so much for all your help... I learned so much from you, and am going to check out that other clamwin that does live stuff now....

hugs, Cat

I'm glad you solved the problem. However, you might provide an explanation of what was wrong--in case it happens to someone else. Evidently it was due to your internet service configuration.

If you downloaded Malwrebytes, keep it on your machine. It is very good at find infections that other scanners miss. You also need a real-time scanner, so look into Clam Sentinel as a way to use ClamWin for real-time scanning. The internet can be dangerous, so be careful!

Regards,

thanks Bob, I did download clamwin sentinel, and will continue to use it as well as the Malwrebytes and clamwin...this way I have triple coverage.... I am just really lucky not to have gotten some really bad stuff with my system not protected these last few months as much as I am on facebook....

apparently what happened was some type of virus apparently changed the dns server from the correct one...the tech took over my machine,and I don't know what he did, but he had to change several things in the settings, to resolve the issue... but it was on my system, not the clamwin's problem...

thanks again for all your help... Cat

You are very welcome, Cat.

Just being on Facebook doesn't necessarily mean you will get a virus. What you do can also determine whether or not you get one. Most large, legitimate sites are fairly safe most of the time.

Re: ClamWin and Clam Sentinel: they work together. ClamWin must be installed before you can install/use Sentinel. Sentinel then uses ClamWin's signatures and scan engine to scan files that are added, copied, or modified on your computer. In addiiton, Sentinel has its own system monitor that can detect many virus files for which ClamWin has no signature. Any viruses detected are put into the ClamWin quarantine folder. There is a Sentinel Recover program that can restore quarantined files if they turn out to be "false positives" and not real viruses.

Set Sentinel to run at startup, detect and monitor new drives, quarantine infected files, and monitor the system for new malware (detect suspicious files only). These are Settings. Under the Advanced Settings, monitor your C drive.

Regards,