For the last several months I have not been able to get Clamwin 99.4 with win 7 to finish scanning. I get on average 30 errors listed then clamwin will stop. Clamwin is also taking longer than 24 hours to do a full scan whereas before the stoppage it could do the same scan in a couple of hours.

Hmmm. Twenty four hours is waaaaaay too long for a scan. You might try a reinstall of ClamWin to see if that helps. Other than that, I don't know what to tell you right now. If it doesn't help, we will probably need to see a scan report.

Be sure to use a real-time AV along with ClamWin. You need good protection even if ClamWin isn't doing a good job.

Let us know how it goes.

Regards,

This is file that seems to kill the scan process. past scans have stopped on this file too.

WARNING: Can't open file C:\Windows\winsxs\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_2f54961b4c9f4194\dnary.xsd: Permission denied



----------- SCAN SUMMARY -----------
Known viruses: 6284735
Engine version: 0.99.4
Scanned directories: 38285
Scanned files: 259683
Infected files: 0
Total errors: 26
Data scanned: 51609.28 MB
Data read: 130936.05 MB (ratio 0.39:1)
Time: 71864.682 sec (1197 m 44 s)

The following files are Digitally Signed by Microsoft Corporation and may have been incorrectly detected as viruses:
C:\Windows\SysWOW64\dxdiag.exe: [Win.Virus.Expiro-7101704-0] FALSE POSITIVE FOUND
C:\Windows\SysWOW64\ocsetup.exe: [Win.Virus.Expiro-7101697-0] FALSE POSITIVE FOUND
C:\Windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7601.17514_none_25cb021dbc0611db\dxdiag.exe: [Win.Virus.Expiro-7101704-0] FALSE POSITIVE FOUND
C:\Windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.1.7601.17514_none_e5849be1bd89e07e\ocsetup.exe: [Win.Virus.Expiro-7101697-0] FALSE POSITIVE FOUND
Please do not be alarmed and help us by submitting the files identified above as FALSE POSITIVE at https://www.clamav.net/sendvirus/

The file in question appears to not be scanned due to permission denied. It appears to be a valid Windows system file, so I wouldn't worry about it. You could whitelist/exclude it from ClamWin's scans.

As for the false positives, you could upload one of them to Virus Total. If the Clam AV scan engine used by ClamWin is the only Av detecting it, Virus Total will send Clam Av a copy of the file so they can correct their signature.

Regards,

thank you.
well see what happens when clam updates.

Clam Av isn't too quick about correcting false positives. No one works on it full-time, as their efforts are primarily devoted to Cisco's money making projects. You know, at one time Cisco was using Clam Av on hundreds of computers, and they never gave a dime to the Clam Av project. Now they own it...

Regards,

At first glance, the ClamWin download messages you get look the same as what I often get when I try a manual download. For one reason or another, manual downloads do not go well at times. Let me suggest this for the present: set ClamWin to download hourly and see if it updates.
https://jiofilocalhtml.run jiofi login https://forpc.onl forpc [url=https://forpc.onl/tubemate-for-pc/][/url]

I don't think changing the time interval will help make signature updates any better. The updates come from Clam AV. I don't know what is going on at Clam AV, but when I was working signatures with them from 2009-2014, they were using volunteer mirrors that had been cobbled together to perform the updates, and they occasionally had problems back then. Cisco now owns Clam AV and they may not have changed things very much--after all, Clam AV is not a money maker for them. Back then Clam AV was owned by Sourcefire. Cisco was using Clam AV on hundreds of servers, but they didn't contribute a penny to the Clam AV project! I doubt if Cisco feels any more like plowing much time/effort/money into Clam AV now that they own it.

Both signature updates and computer scans are very slow on ClamWin now. It badly needs a program update, but there has been none going on three years now. It is about time for users to replace it with something else.

Regards,