Newbie to ClamWin fora; not sure where to post this but the foci of the other fora are tighter than this one . . .
Just upgraded to V0.96.0.1. On successful completion, window generated by Search & Destroy declaring that WCLOSE.EXE (in C:\Programs Files\ClamWin\bin) as being "a process that is listed as part of a malicious software". Identified as "Win32.ZBot"
The option presented was to delete the file (which I accepted but I can recover it). Anyone come across this one before ?

WCLOSE.exe have not changed since 2004
It would be great if you could submit it to Spybot as False Positive
Here is the VirusTotal report of WClose.exe from 0.96.0.1
https://www.virustotal.com/analisis/2e3c90392394ac10234968207a85784ca22e6c0194b044641350ed590f984c99-1271323196

My WClose.exe file is 49152 bytes in size, and it has an MD5 hash of 0f9dfa33988709438c1258a1da569b37. 0/19 of the available AVs on Jotti recoginze the file as infected. Report this to the Spybot S&D people as a false positive.

Regards,

Thanks guys; I'll take up your suggestion & contact the S&D folk