 |
 | Scanner Warnings |  |
pressley5
Joined: 09 Mar 2007 |
Posts: 0 |
|
|
 |
Posted: Tue Mar 27, 2007 8:15 pm |
|
 |
 |
 |
 |
Please. What do I need to do to get things running smoothly? Thank you, thank you.
I see that the memory scan is completed, but there are a lot of warnings after that. Clamscan, clam tray, freshclam, and virus scanner are all exceptions in my firewall.
My information:
*** Scanning Programs in Computer Memory ***
*** Scanned 42 processes - 397 modules ***
*** Computer Memory Scan Completed ***
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000: ClamAV-Test-File FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar-1.gz.000.000.000.000.000.000.000'
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000: ClamAV-Test-File FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\infected.clamav-0.90.tar.gz.000.000.000.000.000.000.000'
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Application Data\Microsoft\Office\Recent\RelativeResourceManager;JSESSIONID=Gw0Cf1PT2FjgLXLhQ3sSx9Ln5T61qJntTnWLXyLwn8V1Jbk8WnpL!610746534!nlna3.sysapps.unlv.edu!8080!-1!692271625!nlna2.sysapps.unlv.edu!8080!-1!115.u15.u\
??—<X>@
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Temporary Internet Files\Content.IE5\0P23GHIJ\.com%2Fbrowse%2Falpaca&kw_type=broad&kw=alpaca&num_radlinks=5&max_radlink_len=27®ion=def&cc=100&u_h=800&u_w=1280&u_ah=772&u_aw=1280&u_cd=32&u_tz=-300&u_his=4&u_java=tra=tr´
??—â€? ??—X>@
WARNING: Can't open file \\?\C:\Documents and Settings\my name\Temporary Internet Files\Content.IE5\GTUVKXMN\.com%2Fbrowse%2Fcereal&kw_type=broad&kw=cereal&num_radlinks=5&max_radlink_len=27®ion=def&cc=100&u_h=800&u_w=1280&u_ah=772&u_aw=1280&u_cd=32&u_tz=-
300&u_his=5&u_java=tra=tr´
??—â€? ??—X>@
WARNING: Can't open file \\?\C:\hiberfil.sys
WARNING: Can't open file \\?\C:\pagefile.sys
I get a balloon that says: running scheduled task local disk. It is scheduled to scan at 1:30 am.. No matter what time of day I go to work on my computer, I get the same message.
|
|
 |
 | Needs Help |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Mar 28, 2007 6:07 pm |
|
 |
 |
 |
 |
It's been awhile since you posted, and no one has answered. I'm just another ClamWin user like you, but I'll take a crack at it.
You don't usually have to worry if ClamWin can't scan a file because it's open. These open files are usually system files in use or files/programs you have open/minimized. Naturally, ClamWin can't scan a file if it is currently in use. It appears that you have set ClamWin to quarantine files it finds that contain malware--good. To make sure these are not false positives, you should check these files out and remove them--because ClamWin also scans the files in the Quarantine folder. So some of the files in the Quarantine folder are probably duplicates. If you are lazy, you could just delete them--if so, I'd set a System Restore Point befre delete--in case you shouldn't have deleted.
You can check the quarantine files out to see if they are real malware or false positives on the Web with VirusTotal at https://www.virustotal.com/en/virustotalf.html. Just upload them (top of their page) one at a time and check it out. You will get a complete report for each file of what was found when VirusTotal is through scanning it. If a couple of other scanners besides ClamWin find a virus/malware, then it is probably real. If ClamWin is the only scanner finding malware, then it is probably a false positive.
You can safely delete the real malware from quarantine and restore the false positives to where they were on your computer. If you are industrious, you should probably notify ClamAV of any false positives so they can change their signature database. To do this, go to https://cgi.clamav.net/sendvirus.cgi to do this--it's similar to the process at VirusTotal.
While scanning, ClamWin may give you error messages. This is generally "housekeeping" stuff, and this is usually okay as long as it keeps scanning.
Hope this helps.
Regards,
|
|
 |
 | balloon that says: running scheduled task local disk |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Mar 28, 2007 6:10 pm |
|
 |
 |
 |
 |
I forgot to address that. I don't think I can be much help there. Look at ClamWin Preferences, Scheduled Scans and see if you've got a scan scheduled there. If so, change it to something better for you.
Regards,
|
|
 | Re: balloon that says: running scheduled task local disk |  |
b0ne
Joined: 26 Oct 2006 |
Posts: 0 |
|
|
 |
Posted: Wed Mar 28, 2007 7:05 pm |
|
 |
 |
 |
 |
I believe sherpya said he was going to suppress these error messages.
|
|
sherpya
Joined: 22 Mar 2006 |
Posts: 0 |
Location: Italy |
|
 |
Posted: Wed Mar 28, 2007 9:55 pm |
|
 |
 |
 |
 |
invalid name creation in ole2 containers is fixed,
"can't open" on locked files will say also the reason (e.g. access denied)
|
|
 | Many Thanks :) |  |
pressley5
Joined: 09 Mar 2007 |
Posts: 0 |
|
|
 |
Posted: Thu Mar 29, 2007 7:41 pm |
|
 |
 |
 |
 |
Thank you, GuitarBob. What a relief.
|
|
 | Let's Thank |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu Mar 29, 2007 9:11 pm |
|
 |
 |
 |
 |
Let's thank Alch, Sherpya, and the others on the ClamWin team for all their hard work. Monitoring the forums takes away from their development work, so they can't always answer you as quickly as they would like. Thanks to their efforts, however, ClamWin is becoming a free, alternative virus scanner that is less resource-intensive.
Regards,
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Thu Mar 29, 2007 11:22 pm |
|
 |
 |
 |
 |
GuitarBob, I'd like to thank you for the invaluable help you provide to users in our forums. It is much appreciated and indeed saves us a lot of time.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Fri Mar 30, 2007 1:14 pm |
|
 |
 |
 |
 |
Thanks, Alch.
Regards,
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
|  |