I am getting the same email alert every morning telling me that a virus has been found in the clamwin quarantine file, well ok - well done ! where else should it be ? I would assume that this means clamwin has dealt with it - But why tell me every day ?

please help a non techi, here are the relevant clues:

C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamscan.exe.dmp: Trojan.S-King FOUND
File excluded 'C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamscan.exe.dmp'
C:\Program Files\ClamWin\bin\clamscan.exe.dmp: Trivial-37 FOUND
File excluded 'C:\Program Files\ClamWin\bin\clamscan.exe.dmp'

Thanks Mark.

You could turn off/uncheck the Email alert box in ClamWin preferences. Also go to the quarantine folder--it will be named in the General Preferences options in ClamWin preferences. See if there is actually anything there. If there is, decide what to do with it. ClamWin hasn't removed it because you checked the quarantine box for dealing with infected files. It also can't do anything with a file that has been quaranrtined. When the infected file is put in quarantine, it's up to you do delete it. Make sure the program(s) in the folder from which the infected file was removed work all right--if they don't, you may have to reinstall them.

Regards,

https://www.clamwin.com/content/view/152/96/ https://www.clamwin.com/content/view/152/96/
report the file withing a zipped archive or delete it

Thank you for those replies.

It is a nuisance that Norton misses it and does not have it listed in its extensive virus list otherwise that would take care of dealing with it.

I just have the sneaking suspicion that it is lurking somewhere else and every day I reboot the computer I generate the virus again - which subsiquently gets found again, But perhaps I am wrong.

As recommended I will delete what I find in the quarantine file, as that would seem to be ok from what Norton says about other variant 'Trivial' virus's.

Mark.

Delete the quarantined file and then see what happens, but first send it to Norton, however, to they can update their signature database. Update your version of Norton frequently.

It's probably a good idea to use two antivirus programs--provided one of them has resident memory turned off. You don't have to turn ClamWin off--since it is not yet resident.

Hang in there with ClamWin. It is being improved all the time, and it doesn't "hog" the resources like many antivirus programs. There are now over 77,000 signatures in its database, compared to 60,000 in July.

Regards,

Hi Guys

Thank you for all that.

I do seem to have removed the little bugs by deleting the items from quanantine files and wherever else they were found.

I restarted without a sytem restore enabled and scaned for viruses with the latest definitions - rebooted 3 times with scans between and got 2 all clears

I was worried about clamscan.exe (?) that I had to delete because it showed a virus in it - but so far so good and if clamwin does act up then I can always remove clamwin and re-install it.

I hope this is what you all had in mind.

Thank you again

Mark.

you don't need to remove clamscan.exe, but clamscan.exe.dmp, it't created by libclamav when an executable that uses it crashes,
the name used is the executable name + .dmp

Ahhh ... Sorry Sherpya - I have deleted it - shall I uninstall and re-install Clamwin ?

But it does seem to working ok, but then what do I know !

Thanks for the help.

Mark.