ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
ClamWin Free Antivirus Forum Index » Virus Scanner
Reply to topic
ClamWin & WMF files
Shane Pitman


Joined: 03 Jan 2006
Posts: 0
Post Posted: Tue Jan 03, 2006 12:24 pm Reply with quote
I know there's a huge scare going on concerning WMF files right now, but why all of a suddent did ClamWin decide to Quarantine every WMF file it could find on my system including those included with the MS Office install? Here's the scan log of this PC from last night.

Quote:
Scan started: Tue Jan 3 02:30:04 2006

C:\Documents and Settings\shanepitman\Local Settings\Temporary Internet Files\Content.MSO\1CE9A736.wmf: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\1CE9A736.wmf'
C:\Documents and Settings\shanepitman\Local Settings\Temporary Internet Files\Content.MSO\75A7E3C9.wmf: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\75A7E3C9.wmf'
C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\MC561403.CAB: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\MC561403.CAB'
C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\YA561403.CAB: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\YA561403.CAB'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BOAT.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CLASSIC1.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CLASSIC2.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CLIP.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CRANE.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CUP.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\FLAP.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02125_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\NA02125_.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00489_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\PE00489_.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PRRT.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\PRRT.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\RECYCLE.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY1.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\STUBBY1.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\STUBBY2.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TAIL.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\TAIL.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\WHIRL1.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\WHIRL2.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING1.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\WING1.WMF'
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING2.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\WING2.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18180_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18180_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18181_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18181_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18182_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18182_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18184_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18184_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18185_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18185_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18187_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18187_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18189_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18189_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18190_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18190_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18191_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18191_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18192_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18192_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18193_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18193_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18194_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18194_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18196_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18196_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18197_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18197_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18198_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18198_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18199_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18199_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18200_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18200_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18201_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18201_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18202_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18202_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18203_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18203_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18204_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18204_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18205_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18205_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18206_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18206_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18209_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18209_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18210_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18210_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18211_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18211_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18212_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18212_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18213_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18213_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18214_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18214_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18215_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18215_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18216_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18216_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18217_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18217_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18218_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18218_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18219_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18219_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18220_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18220_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18221_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18221_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18222_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18222_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18223_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18223_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18224_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18224_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18225_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18225_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18226_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18226_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18227_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18227_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18228_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18228_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18229_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18229_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18230_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18230_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18231_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18231_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18232_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18232_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18233_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18233_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18234_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18234_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18235_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18235_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18236_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18236_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18237_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18237_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18238_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18238_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18239_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18239_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18241_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18241_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18242_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18242_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18243_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18243_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18244_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18244_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18245_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18245_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18246_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18246_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18247_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18247_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18248_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18248_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18249_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18249_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18250_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18250_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18251_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18251_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18252_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18252_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18253_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18253_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18254_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18254_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18255_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18255_.WMF'
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18256_.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\BD18256_.WMF'
C:\Program Files\Microsoft Office\OFFICE11\BITMAPS\STYLES\GLOBE.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\GLOBE.WMF'
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Overlays_files\image005.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image005.wmz'
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image001.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image001.wmz'
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image003.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image003.wmz'
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image005.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image005.wmz.000'
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Overlays_files\image005.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image005.wmz.001'
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image001.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image001.wmz.000'
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image003.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image003.wmz.000'
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image005.wmz: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\image005.wmz.002'
ERROR: Can't open file C:\WINDOWS\system32\CatRoot2\tmp.edb
ERROR: Can't open file C:\WINDOWS\system32\config\default
ERROR: Can't open file C:\WINDOWS\system32\config\SAM
ERROR: Can't open file C:\WINDOWS\system32\config\SECURITY
ERROR: Can't open file C:\WINDOWS\system32\config\software
ERROR: Can't open file C:\WINDOWS\system32\config\system
ERROR: Can't open file C:\WINDOWS\Temp\76340D3.dmp

C:\Documents and Settings\shanepitman\Local Settings\Temporary Internet Files\Content.MSO\1CE9A736.wmf: Exploit.WMF.Gen-3 FOUND
C:\Documents and Settings\shanepitman\Local Settings\Temporary Internet Files\Content.MSO\75A7E3C9.wmf: Exploit.WMF.Gen-3 FOUND
C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\MC561403.CAB: Exploit.WMF.Gen-4 FOUND
C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\YA561403.CAB: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02125_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00489_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PRRT.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY1.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TAIL.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING1.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING2.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18180_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18181_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18182_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18184_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18185_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18187_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18189_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18190_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18191_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18192_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18193_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18194_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18196_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18197_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18198_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18199_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18200_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18201_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18202_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18203_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18204_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18205_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18206_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18209_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18210_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18211_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18212_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18213_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18214_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18215_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18216_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18217_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18218_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18219_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18220_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18221_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18222_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18223_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18224_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18225_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18226_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18227_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18228_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18229_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18230_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18231_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18232_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18233_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18234_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18235_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18236_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18237_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18238_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18239_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18241_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18242_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18243_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18244_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18245_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18246_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18247_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18248_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18249_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18250_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18251_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18252_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18253_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18254_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18255_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\BD18256_.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Microsoft Office\OFFICE11\BITMAPS\STYLES\GLOBE.WMF: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Overlays_files\image005.wmz: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image001.wmz: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image003.wmz: Exploit.WMF.Gen-4 FOUND
C:\Program Files\Stardock\ObjectDock\Docklets\SysStats\system\Scripts_files\image005.wmz: Exploit.WMF.Gen-4 FOUND
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Overlays_files\image005.wmz: Exploit.WMF.Gen-4 FOUND
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image001.wmz: Exploit.WMF.Gen-4 FOUND
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image003.wmz: Exploit.WMF.Gen-4 FOUND
C:\TEMP\oldObjectDock\Docklets\SysStats\system\Scripts_files\image005.wmz: Exploit.WMF.Gen-4 FOUND
-- summary --
Known viruses: 42049
Engine version: 0.87.1
Scanned directories: 8557
Scanned files: 98399
Infected files: 101
Data scanned: 22975.85 MB
Time: 15323.117 sec (255 m 23 s)
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Post Posted: Tue Jan 03, 2006 2:03 pm Reply with quote
most likely it is a Exploit.WMF.Gen-4 FOUND false positive triggered on every wmf file. It should be soon rectified by clamav database maintainers
View user's profileSend private message
Shane Pitman


Joined: 03 Jan 2006
Posts: 0
Post Posted: Tue Jan 03, 2006 2:13 pm Reply with quote
Actually, I think they just fixed it. I just got the latest updates and rescanned the files that had been moved to the Quarantine folder and they all passed. Now to move them back where they belong. Is there an easy way to do that? I don't see any options in ClamWin to return Quarantined files to the folders that they were moved from.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Post Posted: Tue Jan 03, 2006 3:11 pm Reply with quote
there is no easy way unfortunately. The best approach is to use a scripting language (such as python) to parse the log file
Quote:

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\\CUP.WMF'

and copy files back.
View user's profileSend private message
ClamWin & WMF files
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT  
Page 1 of 1  
  
  
ClamWin Free Antivirus Forum Index » Virus Scanner
 Reply to topic