hi,

clamwin is detecting 3 viruses but will not quarantine or remove them even though i have tried to run it with each option enabled.

the log says they are removed but they remain as i run clamwin over and over.

i have attached a screen shot of the clamwin warning.

please advise.

https://postimage.org/image/lmq4pct39/

I think those detections are probably false positives--a detection of a virus in a file that does not really contain a virus. I have seen recent complaints of some Virut detections in Google Chrome files and also a false Zbot detection. The files are probably being restored by Google Chrome and MS Works when you run them.

You can upload files (one at a time) to Jotti or Virus Total to verify them. Either service will scan your files with multiple AVs, including Clam AV, which furnishes its scan engine and signature database to ClamWin. If at least 2 of these AVs detect a virus, I will believe it: Avira AntiVir, Bitdefender, Kaspersky, Nod32, or Sophos. If it turns out to be a false positive, upload the file to Clam AV starting at https://www.clamav.net/lang/en/sendvirus/ on the web and report it as a false positive so Clam can fix their virus signature.

ClamWin will inform you and prevent some important Windows system files from being quarantined as a false positive, but files outside the Windows folder are not protected. You can restore falsely-quarantined files with the ClamWin Qurantine Browser utility--accessable from Start, All Programs, ClamWin, Quarantine Browser. It is the Qrecover program in the ClamWin program\Bin folder. They will be detected again, however, at the next scan until Clam AV fixes its signature. You can exclude files from ClamWin scans via the ClamWin configuration, Filters, Exclude Matching Filenames (filename.extension).

Regards,