I cannot get my clamwin to run. I was getting a warning that a virus - New Script.c - has infected my computer and that it was somewhere buried within clamwin. I ran clamwin but it wouldn't run so I uninstalled clamwin and re-downloaded it. It still won't run. Here is the report. Does anyone have any ideas?

main.cvd updated (version: 44, sigs: 133163, f-level: 20, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 15, recommended = 20
DON'T PANIC! Read https://www.clamav.net/support/faq
ERROR: getfile: daily-3305.cdiff not found on remote server (IP: 129.64.99.170)
ERROR: getpatch: Can't download daily-3305.cdiff from database.clamav.net
ERROR: getfile: daily-3305.cdiff not found on remote server (IP: 129.64.99.170)
ERROR: getpatch: Can't download daily-3305.cdiff from database.clamav.net
ERROR: getfile: daily-3305.cdiff not found on remote server (IP: 129.64.99.170)
ERROR: getpatch: Can't download daily-3305.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd

daily.cvd updated (version: 3715, sigs: 6395, f-level: 16, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 15, recommended = 16
DON'T PANIC! Read https://www.clamav.net/support/faq
Database updated (139558 signatures) from database.clamav.net (IP: 129.64.99.170)
--------------------------------------
freshclam 0.90.2 (OS: win32, ARCH: x86, CPU: i686)
ClamAV update process started at Sat Jul 21 09:50:26 2007
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.90.2 Recommended version: 0.91.1
DON'T PANIC! Read https://www.clamav.net/support/faq
main.inc is up to date (version: 44, sigs: 133163, f-level: 20, builder: sven)
daily.cvd is up to date (version: 3715, sigs: 6395, f-level: 16, builder: ccordes)

If ClamWin won't run for you, how did you get the information about the NewScript.c virus?Did you get it when you ran another antivirus program? If so, you should be able to specifically identify it--have the other antivirus program put the file containing the virus in quarantine and then upload it to VirusTotal at https://www.virustotal.com/ where you can scan it for free against 30 antivirus programs. If a couple of them find a virus, and Clam doesn't, then you should delete the file from your computer. Before doing so, however, if the virus is in a ClamWin directory, upload it to the ClamAV virus submission site with all the pertinent information so they can look into it/get a signature/protect ClamWin. The Clam file submisson site is located at https://cgi.clamav.net/sendvirus.cgi on the Web.

It looks like you had some trouble updating ClamWin but you got the update. How did you try to run ClamWin--right click from the icon in the system tray? You can also click on the ClamWin shortcut icon to run. When you do a scan, you'll have to identify what you want to scan--drive C or a directory under drive C or a single file in a directory. You should also be able to scan drive C/a file/directory by right clicking on the name from your Windows Explorer context menu and selecting Scan With ClamWin.

If ClamWin still doesn't scan, look at your preferences by selecting Configure ClamWin after you right click on the icon. The defaults should work okay, but go through each tab. Pay particular attention to the Internet Updates tab--make sure automatic updates are enabled with a time/frequency. Also pay attention to the File Locations tab--make sure that Clamscan and Freshclam are in the ClamWin program directory under the Bin subdirectory and the virus signature database (for Windows XP systems) is located at at C:\Documents and Settings\All Users\.clamwin\db or something similar for other systems.

Regards,

Thank you for your response. Everything looks ok but nothing runs. Here is the message I get whether I run an entire scan or just one file.

can Started Sat Jul 21 18:03:33 2007
-------------------------------------------------------------------------------

ERROR: Unable to open file or directory

----------- SCAN SUMMARY -----------
Known viruses: 5338
Engine version: 0.90.2
Scanned directories: 0
Scanned files: 0
Skipped non-executable files: 0
Infected files: 0

Data scanned: 0.00 MB
Time: 0.250 sec (0 m 0 s)
--------------------------------------
Completed
--------------------------------------

Sorry, forgot to mention that I have Mcafee on my machine but its not current. It came with the machine but its never been updated. It gives me the option to quarantine it but when I click it, it says it unable to because its a read only file. None of it makes much sense to me. I haven't had any problems until my son downloaded a world of warcraft update a couple days ago. He was also on addicting games website during that time as well.

You should always have a fully-functioning antivirus program on your computer if it is used on the Web a lot, and you should have it set up to both scan and update regularly--daily or more frequently. The antivirus program should have a resident scanner that automatically checks files as you download, open, and close them on your computer. You should also have an antispyware program working similarly because antivirus software does't address spyware as completely as dedicated antispyware software does. In addition to antivirus and antispyware, you should also have a properly configured firewall, and your Windows patches should be up-to-date. You should only have one resident antivirus on your computer.

The current verson of ClamWin doesn't have a resident scanner--it only scans on-demand (when you tell it to), so it's better used as a "backup" scanner right now.

It concerns me that your McAfee isn't up-to-date. Was it updating/working okay before you noticed this problem? If it was, then something could certainly be wrong on your system. Viruses are very common on game sites, on instant message/peer-to-peer networks, on porn sites, and on sites pushing illegal copies of software.

I personally don't like McAfee because it consumes too many resources, and you can get better antivirus software cheaper.
Since you already have McAfee, however, you should first get it updated. If you don't have antispyware, a fully-configured firewall, and fully-patched Windows, you need to get them also.

The ClamWin forum only supports the installation, use, and configuration of the ClamWin program. It isn't involved with malware removal, but if you do have malware or other major problems, make another post, and I can recommend some sites on the Web that are better equipped to help you.

Regards,

I also had your same problem with this exact virus. I also run McAfee. Go to ClamWin Help and check that you have the newest version. Download the newest version than update ClamWin. Than try to scan. This fixed my version.

Just downloaded the progam and continue to recieve this message. Any help would be appricated




Scan Started Tue Jul 31 13:03:42 2007
-------------------------------------------------------------------------------

ERROR: Unable to open file or directory

----------- SCAN SUMMARY -----------
Known viruses: 7480
Engine version: 0.91.1
Scanned directories: 0
Scanned files: 0
Skipped non-executable files: 0
Infected files: 0

Data scanned: 0.00 MB
Time: 0.297 sec (0 m 0 s)
--------------------------------------
Completed
--------------------

Same Problem here. I've just loaded up the portable version of clamwin 0.9.1.1 from PortableApps.com, run it from the usb stick choosing to scan memory first and the mcafee that came with this new vista laptop threw up a window with the same message. It says that the New Script.c virus is located in file daily.nbd located along path c:\users\username\appdata\local\temp\clamav- (next line there is a long number/string then .clamtmp\daily.nbd

Both virus programs had recently been updated. I am thinking that McAfee is jumping at shadows and is incompatible with other virus programs. I have submitted the file to McAfee using their menu option and if I can find suspect file on my drive i'll submit it to the notification area here and we might get some answers.

sorry, the file is actually daily.ndb

The .ndb database is related to phishing, and it looks like McAfee recognizes someting in it as a malicious script. It also looks like the false positive is located in a "working" temp file. Delete that temp file from your hard drive, and you will probably be okay.

Regards,