Hi,

Now that I am not allowing ClamWin to automatically quarantine files, I have to check the logs more carefully (I probably should have been anyway). As there are pages of WARNING ("Permission Denied"), it obscures the messages that that matter. After all, as it is running in the administrator account, it doesn't appear that I can do anything about the files that it has no permission to get to (actually, it does seem odd that it can't read those files).

Samples:
WARNING: Can't open file \\?\c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json: Permission denied
WARNING: Can't open file \\?\c:\ProgramData\Microsoft\Diagnosis\events00.rbs: Permission denied
WARNING: Can't open file \\?\c:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C2F0FE07C8398A2F0BDBD6398274F8C1C95DB98.bin.5B: Permission denied
WARNING: Can't open file \\?\c:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1: Permission denied
WARNING: Can't open file \\?\c:\Users\All Users\Microsoft\Diagnosis\events11.rbs: Permission denied
WARNING: Can't open file \\?\c:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C2F0FE07C8398A2F0BDBD6398274F8C1C95DB98.bin.5B: Permission denied
WARNING: Can't open file \\?\c:\Windows\SUA\var\adm\wtmpx: Permission denied
WARNING: Can't open file \\?\c:\Windows\System32\config\SYSTEM.LOG1: Permission denied

So, is there a way to not include these in the log?

Thanks in advance ...

There is presently no way that I know of for the user to configure log output display. They can set up email notices upon virus detection--would that help you in any way?

Regards,

Hi GuitarBob, perhaps I don't understand what you mean by the email notices. The log I quoted from in my original post was from the email attachment that ClamWin sends to me when it completes a scan. To my knowledge, it sends it without regard to whether a virus is found or not (if not, then it would just have all the WARNINGS). It is this email attachment that I'd like to have only focus on issues that need my attention. Did I misunderstand? Thanks!

The permission denied files are files that ClamWin are unable to scan due to several reasons, such as the file is in use at the time, or some locked system file that is unable to be scanned.

There isn't a way to suppress them or anything, but they are also nothing to worry about.

If you do happen to notice a file that cannot be scanned but doesn't seem like a normal file, I would recommend uploading to VT and making sure that file is safe.

ClamWin's Tools, Preferences,Email Alerts configuration provides for email alerts upon virus detection, but if you're getting something already, you may be already using it. It was just a thought--might help.

Regards,