ClamWin Free Antivirus :: View topic - repeating same file...........never stops

Posted: Fri Nov 09, 2007 2:06 pm

I am trying to use Clamwin for 1st time. started last night and it keeps scanning same file

C:\Program Files\Xfire\downloads\AA28FullInstaller_Xfire.exe

It goes through progression from 0%- 100% and scans again

I stopped scan and started over 2x's now each time it gets there and that's all she wrote.

Any suggestions

Posted: Fri Nov 09, 2007 3:08 pm

Does ClamWin scan okay on other files? If it does, I suggest you upload that one file to Jotti at https://virusscan.jotti.org/ on the Web and see how other AVs treat it. If the file "breaks" ClamWin, the developers need to know about it. If you post again, you might include a pasted copy of the ClamWin scan log.

Regards,

Posted: Sat Nov 10, 2007 2:22 am

is the file downloadable from somewhere?

Posted: Sat Nov 10, 2007 6:32 pm

I have enclosed scan report
Scanning aborted...

C:\Documents and Settings\All Users\.clamwin\quarantine\infected.cax11C.tmp: Adware.Seekmo FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.colortetris.exe.000.000: Adware.Navexcel-2 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.RiskIISetup-dm.exe: Adware.Downloader-11 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 166335
Engine version: 0.91.2
Scanned directories: 2910
Scanned files: 32108
Skipped non-executable files: 851
Infected files: 3

Not moved: 3
Data scanned: 39006.71 MB
--------------------------------------
Cancelled
--------------------------------------
I have attempted to upload Xfire file to website you recommended I started at approx 20 hrs ago that too has not finished uploading.

Posted: Sat Nov 10, 2007 6:34 pm

Yes it is from Xfire

Posted: Sat Nov 10, 2007 7:32 pm

It appears that xfire is an online gaming program. You can download the game and also related software--skins, clans, and messenger. Gaming software is a frequent infection vector. I think you should just uninstall the xfire file on your computer and delte the two infected files that are in quarantine. Then run another ClamWin scan and see what happens. If you still have problems, get into Windows Safe Mode and do another ClamWin scan. Hopefully, you will be infection free. If not, run a scan with a good antispyware or anti-malware program. If you don't have one, you can get free trials from most of them, and Windows Defender antispyware is free. Run a normal scan and then one from Safe Mode.

Regards,

Posted: Sat Nov 10, 2007 8:46 pm

the "Bad" file is still being uploaded. Should I assume it is the problem

Posted: Sat Nov 10, 2007 9:20 pm

Yes--that file appears to be the problem. The fact that your ftp upload also had a problem with it is indicative that something is wrong with that file. Sherpya is aware of this, so he can look into it if he thinks it's necessary. I don't think you want it on your computer. After it's deleted, run another scan and see if everything is okay on your end.

Was this an archive file? If so, what size? ClamWin's scan preferences for archives defaults to scanning 10 megabytes file size in each archive, no more than 500 files in the archive, and no more than 5 sub-archives. I don't think it would "grind" on if a file exceeded those maximum amounts--you'd get some sort of message.

Scan regularly if you have a lot of gaming software.

Regards,