I continue to get false positives for installation and uninstall executables:

msgr8us.exe (Yahoo Messenger)
unins000.exe (Real Player Uninstall)
telnet.exe
SnagIt.exe (Video Capture)
mpcLauncher.exe


These are all well known utilities/applications and have been on my system for years, and without complaint from other AV scanners.

I agree, an interface to view quarantined files and provide a disposition that ClamWin can learn from, or at least so my local ClamWin knows that the file is okay.

Thanks for any help

The resason for most false positives is that malware may use some of the same code as "good" applications. The only way for us users to "fix" this is to let Clam know about a false positive, so they can adjust their signature. When you get a detected infection on a file you use frequently, and you are sure it is "good," then go to the Clam submisson page at https://cgi.clamav.net/sendvirus.cgi on the web. This is the same page that you report a virus on. Indicate that it is a false positive, give the exact virus name that Clam falsely detects, and add any other comments you care to make.

Regards,

It would be REALLY nice if clamwin restored those false positives after the database update no longer registers them as viruses.
And as stated it would also be nice if you could tell your local calmwin to leave specific files alone (for that virus, and log the action). Otherwise you have to make the choice to not scan, or restore the files manually each time until the DB is updated.

You can presently tell ClamWin to exclude a file from its scheduled scans by going into the Configuration menu to bring up Preferences. Then click on Filters. You will work with the left-hand side of the screen under Exclude Matching Filenames. Click on the dim square box to go to the end of the list and insert a filename.extension you want to exclude (example: winamp.exe). Then double click on the box again to leave the line and OK it. Do this for each file you want to exclude.

This excludes the file from scheduled scans but not from other scans--such as memory scans or Explorer right-context scans.

Regards,