I am a new user and this is also 1st time on a forum so an a novice twice over. Just dumped NORTON for Clamwin and did a scan. It found many things amongst them 3 enfected fieles. SO what do I do now?

It might be best to upload the files one at a time to VirusTotal for a free scan with about 30 antivirus products to see if any other antiviruses find them infected. If at least a couple of the other antiviruses also spot a file as infected, it is probably not a false positive, and you can safely delete it--from quarantine if you have set up ClamWin to quarantine infected files or you can find the file with Windows Explorer (the Clamwin infection report will tell you where it is on your computer), and delete it.

VirusTotal is at https://www.virustotal.com/en/indexf.html on the Web. Once there, you can also download an automated script there that will let you automatically upload a file to them in the future.

Regards,

Thanks for the help guitarbob.

I agree with dumping Norton. It uses too many computer resources and is expensive. Clamwin is not presently an on-access (or resident) scanner like Norton is. That means it does not check your computer files as they are opened/closed/saved/updated. It is an on-demand scanner and checks files on your computer when you request it to scan a file, a directory or hard drive.

You will probably be okay/safe using Clamwin if you: (1) have it check any files that you download before you use/open them, don't click on files while using Instant Messenger or Peer-to-Peer programs, and stay away from porn sites and sites that deal with illegal copies of software; (2) use a firewall; (3) use an antispyware program (preferably one that is on-access like Microsoft Defender or SuperAntispyware). If you visit a lot of untrusted/unknown Web sites, you should probably use an on-access (resident) antivirus scanner and keep ClamWin as your backup. Avira Antivir, AVG Antivirus, and Alwil Avast are all good on-access scanners, and they are free and not as resource-hungry as Norton.

The ClamWin developers are hard at work on upgrading ClamWin to on-access (resident) status, although there is no estimated release date yet.

Regards,

Ok, dumb question. How do I upload a file from my quarantine report to VirusTotal? When I look at the CW report I see something that says: JScript Script File (looks like letter S) infected.thickbox[1] What to do next? I can't cut and paste anything from here. Thanks for your help. I have been looking at the ClamWin site but can't find my answer.

Judy

Go to the Virus Total Site, Click on Browse to the right of the place to put in the file name. That will open up your computer, and you can then navigate to the quarantine folder using Windows Explorer. Click on the file, and you will be able to upload it. Virus Total also has downloadable script that you can use from the Windows Explorer right context menu--just click on the filename in Windows Explorer and it automatically uploads the file to Virus Total (I wish ClamWin would integrate this).

Regards,

I have this virus:
C:\WINDOWS\system32\spool\drivers\w32x86\3\system.exe:Trojan.Servu.1
Thanks