At this point I have installed the latest version od "ClamWin" and i'm starting to use it. I do show that a "TrojanAgent" was found. I will include a screen shot, do I delete the file, here was moved to ?
The next question is, will this setup work with "Stopzilla" ? I got this from the Clam-win web site and down loaded ans installed it. I am still testing it.
Who else is using it with ClamWin ?.......mike



https://postimage.org/image/1n0y8uokk/

On the ClamWin general preferences tab you can set the infected files option to Report Only, Quarantine or Remove. It is best to use Report or Quarantine. If you select quarantine, the file is transferred to ClamWin's quarantine directory where it cannot do any harm. If you use Report, you will have to delete it yourself.

ClamWin is an on-demand scanner (it only scans when you do it manually or via a scheduled scan). It is not a real-time/on access scanner that scans as files are accessed. You should not have more than one scanner in real-time mode. Since ClamWin does not scan in real-time, it will not have any conflict with StopZilla or any other real-time scanner. Just the same, I suggest that you exclude ClamWin's quarantine directory and signature database directory from StopZilla scans, and vice-versa.

You can get better real-time protection than StopZilla with either Microsoft Security Essentials, Avira's AntiVir, or Avast. All three are very good real-time scanners with versions that are free for home use.

Regards,[/img]

Thanks, Do I have to manage these files ie; delete move or whatever these files from time to time ? I have not started to work with StopZills yet. I'm still reading the help files....thanks mike

If the infected files option is Report Only, it is only reported, and nothing is done. The user has to decide what to do with it. If the option is set to Quarantine, the file is placed in the Quarantine folder. You may want to manually delete quarantined files every so often--just to get them off your computer, but you do not really have to do anything. You should probably not use Remove. Every so often, ClamWin will falsely report that a file is infected (a "false positive."). If the false positive is on an important file, you will lose access to it if it is removed. If the file is a Windows system file, you could lose access to your computer if it has been removed. ClamWin now has some protection against removal/quarantine of signed Windows files if you are using a Vista or Windows 7 computer, and it also has a restore from quarantine function to help restore other files as well.

You can verify that a file is infected by uploading it to either the Jotti or Virus Total online scanning service, where they will scan it with multiple antivirus programs (including the Clam AV scan engine used by ClamWin). If more than 5 AVs say it is infected, it probably is. I also like to see at least 2 of these AVs verify an infection: Avast, Bit Defender, Kaspersky, NOD 32, and Sophos.

If a file is a false positive, you can upload it to Clam AV at https://www.clamav.net/lang/en/ on the web to report it. Select Submit A File on the main Clam web page. When you get to the upload page, indicate that it is a false positive, and give the name of the false detection in the comments section. Clam will correct the signature (usually within a couple of days), and ClamWin will get the correction. You can also report an undetected file with a virus this way--but indicate that it is an infected file with a virus.

Regards,