Hello
I am a newbee

I launched a scan of c: drive and somme virus have been detected OK

And now, what shoud I do to remove the virus, is-it ClamWin who do the work ?

The configuration options of ClamWin come in the tabs under the Tools, Preferences menu. The General configuration has 3 Infected File options: Report, Remove, or Quarantine. ClamWin comes with a default of Report. If you want ClamWin to automatically remove any viruses it finds, you should change the infected file option to Quarantine. For the first time, you will have to re-scan your computer if previously found some viruses. Do not ever use the Remove infected file option because if ClamWin has a false positive detection of a file that is not really infected, you will not be able to restore the file via the QRecover.exe restore program found in the ClamWin\bin folder. You should report all files that are falsely detected to Clam AV at https://www.clamav.net/contact.html on the web. Select the false positive option. It is probably best to do this while the file is still in quarantine so it is easier to find. Clam AV supplies the scanning engine and virus signatures used by ClamWin, and that is why you have to report to Clam AV. You can also report any viruses in files that are not detected by ClamWin--just select that option.

You should also use the scheduled scans Tools, Preferences tab to schedule automatic ClamWin scans of your computer. I recommend just scanning memory, the users folder, the Windows\system32 folder, and the sysWOW64 folder (for Windows 8 x64 computers. You should get familiar with all the configuration options.

Thanks for using ClamWin.

Regards,

To add on to what GuitarBob, if you run into a file you think is a false positive or a file you are unsure about, you can always submit it to virustotal here: https://www.virustotal.com/ Usually if only 2 or 3 engines pick up a threat, it is a false positive. If 4 or more pick it up, it is most likely a active threat. If it does turn out to be a false positive, you can always submit it to ClamAV via the link GuitarBob supplied. Make sure you include a virustotal report in your submission because I think ClamAV wants or acts faster if they have actual proof.

Thank you for the information, it is just what I needed

BR

Czmax

I understand you are new to ClamWin. I had created a get started tutorial video for new ClamWin users that should cover all the basics of ClamWin for you. The video is available here: https://www.youtube.com/watch?v=rArBN7YUsVU Hope this helps you out.

Thank you for the link

As I am french, a video is not my best choice for a tutorial, but neverless I will do my best to take advantage of it

Thank you again

Czmax

You might be interested in Clam Sentinel, which is another free, open source program that lets you scan with ClamWin in "real time" as files are added, modified, or copied on your computer. Clam Sentinel also has its own heuristic scanner that can detect viruses for which ClamWin does not have a signature. Clam Sentinel is a separate project, but ClamWin must be installed before using Clam Sentinel. The Clam Sentinel site is at https://sourceforge.net/projects/clamsentinel/ on the world wide web. Clam Sentinel is available in French and many other languages. I think you will like it. Be sure to read the Simple Guide before installing/using Clam Sentinel.

Regards,

Do you think I should do a get started tutorial video for Clam Sentinel, as well. Clam Sentinel doesn't necessary have a main page GUI like ClamWin does so a lot of new users might find it difficult to understand how Clam Sentinel work.

I keep suggesting that all new Clam Sentinel users read the Simple Guide, but maybe that's too much to ask. Lots of people are video-oriented nowadays rather than reading-oriented.

Before doing anything, you might check with Andrea Russo to see what he thinks about a video.

Regards,

I will check with him later and post with his answers here. Might take some time to make the video, though.

As I am an old timer working with computer since 50 years, I prefer paper rather than video and moreover if it is in english

A concern about Clam Sentinel :

if you install a light anti-virus, you can miss a virus
but if you install a very active anti-virus, the computer is working most of the time to check intrusion, but the PC is safe

I had the example with the computer of a friend of mine, a specialist installed 2 anti-virus on his computer, one was very active, each time the computer was switch on, the anti-virus started a complete PC check, which was taking several hours, and most of the time, the check was not completed before he switch off the PC. The check was starting at square one at the switch on : conclusion, 90% of the microprocessor workload was dedicated to the anti-virus check ! and some time he was working for the owner

Most AVs, including Clam Sentinel, will let you limit scans to certain folders only, and some like Clam Sentinel even let you limit scans to certain extensions only. When using 2 AVs, exclude their executable files, virus signatures, and temporary scanning files from each other to minimize resource utilization. Clam Sentinel is more of an anti-malware scanner and does not scan like most AVs. The heuristic scan is very fast, but the scan with ClamWin is slow and there is no real file control. It was originally intended for older computers like Win 98. It works quite well with Security Essentials/Windows Defender if you make those exclusiosn, and it increases the protectection of Security Essentials to where most of the other AVs are--say 95% or so of the viruses you are likely to encounter (with some false positives when other programmers insist on doing the same things the virus programmers do..

Regards,