Hello,
i am using Windows Server 2k3 x64 EE over my MSDN-AA account, so i installed ClamWin. My server also works as a fileserver, thats why i store some drivers on it. One of the drivers ist the Integrated220 for Uli-Chipsets. ClamWin reports this:

D:\Downloads\ULi_Integrated220.zip: Trojan.Spy-24535 FOUND

Can this be true? The driver is available https://www.nvidia.com/page/uli_drivers.html here.
Antivir Personal on my other computers has no problem with the file.


I think, it would also be very nice, if there would be an Exceptions List. The files/folders of this list should not be checked by ClamWin. This is something i am missing in ClamWin. In My case, i have to manually select all the folders of my drive, except the folder containing the Uli-drivers in the scheduler. If you've got a lot of folders, this can take some time . So this would be a great feature to add.
Greets, Oberst.

If you have used the driver previously without any problems, it's probably a false positive. I would upload the file to Jotti for a scan with multiple antiviruses just to make sure. The location is listed on the ClamWin Anti-Malware page.

You can use ClamWin's filters preferences (on the left side) to exclude certain files or directories from scans. You will still be able to scan individual files inside the directory, however.

Regards,

you can submit false positives using this form
https://cgi.clamav.net/sendvirus.cgi https://cgi.clamav.net/sendvirus.cgi

clamwin has an exclusion list, look at filters tab in the options dialog

Thanks a lot!
I tested the file at jotti.org. because of the file size i had to split it into pieces, but no virus was found. Seems to be a false positive, so i reported it (sent a link, because the upload-size is limited and the file is to big).

I should have read the help first. I thought this was only for file-extensions, but it works fine now.
Thanks for the help!