ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Scanner Warnings
pressley5


Joined: 09 Mar 2007
Posts: 0
Reply with quote
Please. What do I need to do to get things running smoothly? Thank you, thank you.

I see that the memory scan is completed, but there are a lot of warnings after that. Clamscan, clam tray, freshclam, and virus scanner are all exceptions in my firewall.


My information:

*** Scanning Programs in Computer Memory ***


*** Scanned 42 processes - 397 modules ***
*** Computer Memory Scan Completed ***

C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000: ClamAV-Test-File FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000.000'
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000: ClamAV-Test-File FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000.000'
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Application Data\Microsoft\Office\Recent\RelativeResourceManager;JSESSIONID=Gw0Cf1PT2FjgLXLhQ3sSx9Ln5T61qJntTnWLXyLwn8V1Jbk8WnpL!610746534!nlna3.sysapps.unlv.edu!8080!-1!692271625!nlna2.sysapps.unlv.edu!8080!-1!115.u15.u\
??—<X>@
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Temporary Internet Files\Content.IE5\0P23GHIJ\.com%2Fbrowse%2Falpaca&kw_type=broad&kw=alpaca&num_radlinks=5&max_radlink_len=27&region=def&cc=100&u_h=800&u_w=1280&u_ah=772&u_aw=1280&u_cd=32&u_tz=-300&u_his=4&u_java=tra=tr´
??—â€? ??—X>@
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Temporary Internet Files\Content.IE5\GTUVKXMN\.com%2Fbrowse%2Fcereal&kw_type=broad&kw=cereal&num_radlinks=5&max_radlink_len=27&region=def&cc=100&u_h=800&u_w=1280&u_ah=772&u_aw=1280&u_cd=32&u_tz=-
300&u_his=5&u_java=tra=tr´
??—â€? ??—X>@
WARNING: Can't open file \\?\C:\hiberfil.sys
WARNING: Can't open file \\?\C:\pagefile.sys

I get a balloon that says: running scheduled task local disk. It is scheduled to scan at 1:30 am.. No matter what time of day I go to work on my computer, I get the same message.
View user's profileSend private message
Needs Help
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
It's been awhile since you posted, and no one has answered. I'm just another ClamWin user like you, but I'll take a crack at it.

You don't usually have to worry if ClamWin can't scan a file because it's open. These open files are usually system files in use or files/programs you have open/minimized. Naturally, ClamWin can't scan a file if it is currently in use. It appears that you have set ClamWin to quarantine files it finds that contain malware--good. To make sure these are not false positives, you should check these files out and remove them--because ClamWin also scans the files in the Quarantine folder. So some of the files in the Quarantine folder are probably duplicates. If you are lazy, you could just delete them--if so, I'd set a System Restore Point befre delete--in case you shouldn't have deleted.

You can check the quarantine files out to see if they are real malware or false positives on the Web with VirusTotal at https://www.virustotal.com/en/virustotalf.html. Just upload them (top of their page) one at a time and check it out. You will get a complete report for each file of what was found when VirusTotal is through scanning it. If a couple of other scanners besides ClamWin find a virus/malware, then it is probably real. If ClamWin is the only scanner finding malware, then it is probably a false positive.

You can safely delete the real malware from quarantine and restore the false positives to where they were on your computer. If you are industrious, you should probably notify ClamAV of any false positives so they can change their signature database. To do this, go to https://cgi.clamav.net/sendvirus.cgi to do this--it's similar to the process at VirusTotal.

While scanning, ClamWin may give you error messages. This is generally "housekeeping" stuff, and this is usually okay as long as it keeps scanning.

Hope this helps.

Regards,
View user's profileSend private message
balloon that says: running scheduled task local disk
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I forgot to address that. I don't think I can be much help there. Look at ClamWin Preferences, Scheduled Scans and see if you've got a scan scheduled there. If so, change it to something better for you.

Regards,
View user's profileSend private message
Re: balloon that says: running scheduled task local disk
b0ne


Joined: 26 Oct 2006
Posts: 0
Reply with quote
I believe sherpya said he was going to suppress these error messages.
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Reply with quote
invalid name creation in ole2 containers is fixed,
"can't open" on locked files will say also the reason (e.g. access denied)
View user's profileSend private message
Many Thanks :)
pressley5


Joined: 09 Mar 2007
Posts: 0
Reply with quote
Thank you, GuitarBob. What a relief.
View user's profileSend private message
Let's Thank
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Let's thank Alch, Sherpya, and the others on the ClamWin team for all their hard work. Monitoring the forums takes away from their development work, so they can't always answer you as quickly as they would like. Thanks to their efforts, however, ClamWin is becoming a free, alternative virus scanner that is less resource-intensive.

Regards,
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
GuitarBob, I'd like to thank you for the invaluable help you provide to users in our forums. It is much appreciated and indeed saves us a lot of time.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Thanks, Alch.

Regards,
View user's profileSend private message
Scanner Warnings
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic