Recently (November 14th), I applied the various Microsoft updates to my mail server. After rebooting, the mail server (Windows 2008 R2 Standard with SP 1 install) became very slow, unresponsive. I also was getting a Windows dialog saying that Windows wasn't activated and I needed to reinstall the OS.

Here's the actual error message I was getting:
"An unauthorized change was made to Windows. Windows must be reinstalled to activated. Insert the Windows installation DVD or CD into your computer to begin the reinstallation process."

In trying to troubleshoot the problem, I came across an article on the web that said that sometimes antivirus programs can trigger this error message. So I tried uninstalling and reinstalling ClamWin. That was on the 17th and it seems to have taken care of the problem. Performance was fine and everything was working just fine, until the other day (26th). Same problem. No Windows updates had been installed in the interim. Again, uninstalling and reinstalling ClamWin seems to be the fix. And Windows is saying that it's activated.

I currently have ClamWin version 0.98.4.1 installed with up to date virus definitions.

Just wondering if anyone else have experienced this issue and happen know what the actual problem/fix is (besides uninstalling/reinstalling ClamWin)?

Thanks,

Welcome to the forums. Do you use any other type of anti-virus or HIPS software along with ClamWin? If so, please make sure they are set to exclude ClamWin.exe, clamscan.exe, freshclam.exe, and ClamTray.exe.

Did you check the ClamWin quarantine folder to see if maybe a system file has been quarantined by Clamwin? I assume you have already done this, but I thought I would mention it just to be sure. Also--remember that ClamWin does not have an on-access/real-time scanner. It only scans on-demand or as scheduled. If you need real-time protection on your server, you should get a real-time AV and use ClamWin as a "second opinion" scanner.

Regards,

Rocknrollkid,

No, I have no other antivirus software or HIPS virus installed.

GuitarBob,

No, there's nothing in the quarantine folder. A complete scan did detected several files which ClamWin reported as being a false positive.

Richard

Your scan option, is it set to delete files automatically or is it set to quarantine? You may look at this in ClamWin settings under the General tab. If it is set to automatically removed, then change it to report only for now and see fi this issue is still present (you can change it to quarantine later). If not, there is a beta version up right that may have fixed this already. You should sign up for beta and try out that version to see if that solved your issue.

Would it be possible for you to re-install your Windows OS and see if that solves things? I had a problem this year for several months where after installing ClamWin, everything was okay but after a restart, I always lost ClamWin integration with Windows explorer, and the ClamWin system tray menu did not work. This was eventually solved with a re-install of Windows (Win 8 x64). Somehow the OS had gotten corrupted--at least where operation with ClamWin was concerned.

If this is not possible, let us know, and we will refer your problem to a developer--if they are not already monitoring this thread.

Regards,

Rocknrollkid,

ClamWin preferences are already set to report only. As this is a production machine, not exactly gun-ho to install beta software. I'm sure you understand that.

Richard

GuitarBob,

As I mentioned to rocknrollkid, the computer in question is a production mail server. So reinstalling the OS and the mail software would not really be my first choice. As I'm sure you can understand.

Richard