C:\WINDOWS\$NtUninstallKB951978$\wscript.exe: Trojan.Autorun-292 FOUND
C:\WINDOWS\ServicePackFiles\i386\wscript.exe: Trojan.Autorun-292 FOUND

Any ideas how to remove these? None of the commercial programs like ad-aware or pctools detect it.

It may be a false positive (remember to Search before you Post--and also check the file on Jotti or VirusTotal). See this thread on the ClamWin forum:

https://forums.clamwin.com/viewtopic.php?t=2138 .

You can have ClamWin remove a virus by setting it to Remove or Quarantine infected files in General Preferences instead of the default Report. I would only do this with a KNOWN virus, however, as you might lose an important file if it has a false positive--and you could lose access to your Windows system if there is a false positive in a system file. Set preferences back to Report after the file is gone.

Dr. Web's free Cureit program and Malwarebytes' free version of their Anti Malware program are both pretty good at removing infections. They are listed on the ClamWin Anti-Malware page.

Regards,

Sorry - will search next time.

You are right. Jotti brings up nothing, thanks for the link ---- very helpful.

Jeff

You are very welcome. VirusTotal has a downloadable automated script that integrates with Windows Explorer. After installation, you just right click on a file to send it to them and then check your email. It would be nice if ClamWin would incorporate it or something similar.

Regards,