I understand that Clamwin has the ability to remove running viruses from memory. However it doesn't seem to be able to remove the files from the hard disk when they have hidden, system or read-only attributes.

Would it be possible for Clamwin to change these attributes and then remove the file at some point in the future. To my mind it would make disinfection of viruses like Perlovga much easier.

For the present, ClamWin is dependent upon ClamAV. ClamAV has said in the past (nearly two years ago) they intend to implement removal of OLE type viruses, and that's all they were going to do in the way of "curing."

Some of today's malware is very hard to completely remove, and some of the files they drop are actually harmless. I don't think you will see complete/thorough removal except in the larger commercial antivirus. Such removal routines are certainly beyond the scope/time of Open Source projects. HOWEVER, if something really bad comes along, you might see a single individual removal routine for it--that--developed by a single individual.

Try scanning with ClamWin in Safe Mode with Removal on and see if that helps. Additionally, some of the good antispyware programs do a better job on some trojans than antivirus software does--get a trial of one and see if that helps.

Regards,