While trying to dl the virus db definition, I had twice a warning from the Avast! av. Here the log:

Sign of "JS:ScriptSH-inf [Trj]" has been found in "C:\Documents and Settings\All Users\.clamwin\db\clamav-e08314fe55f03516736c66000864dcc0.00000504.clamtmp\daily.ndb" file.
Sign of "JS:ScriptSH-inf [Trj]" has been found in "C:\docume~1\ribaldi\impost~1\temp\clamav-c8d38bfe25d609882e624b5300816833.0000039c.clamtmp\daily.ndb" file.

Thanks.
RB

I believe someone else mention a similar problem recently. You might search the forum for the topic. Any way, these are not real viruses. They are temporary signatures that ClamWin uses in scanning. It usually deletes them, but I guess Avast kicked in and stopped it before they were deleted. I used Avast for a while and had a similar proble every once in a while. You can safely delete them. They will be a series of letters and numbers.

Regards,

It looks like one of those Avast "detections" might be in the ClamWin signature database itself. You should exclude the ClamWin database directory and quarantine directory from Avast scans.

Regards,

....once we've prevented the Clamwin Database from being scanned, that we have a nice, safe area of a hard drive where viruses can slumber in peace, dreaming happily of the destruction they will cause when their time comes.

Oh, happy days for Clamwin users!!

ulrichburke

I don't believe that the ClamWin database will harbor very many viruses. It doesn't have any executable stuff that could be used, and the DB is digitally signed to provide assurance of integrity. I exclude mine from all other AV scans and vice versa.

Regards,