I just scanned my flash drive with ClamWin Portable. Here is the log:
Scan Started Tue Jul 22 15:11:01 2008
-------------------------------------------------------------------------------
G:\PortableApps\ZSNESPortable\ZSNESPortable.exe: Trojan.Small-8101 FOUND
G:\PortableApps\ZSNESPortable\ZSNESPortable.exe: moved/scheduled to 'G:\PortableApps\ClamWinPortable\Data\quarantine\infected.ZSNESPortable.exe'
G:\PortableApps\ClamWinPortable\Data\quarantine\infected.ZSNESPortable.exe: Trojan.Small-8101 FOUND
G:\PortableApps\ClamWinPortable\Data\quarantine\infected.ZSNESPortable.exe not moved/copied since already in quarantine
G:\PortableApps\WinBoardPortable\WinBoardPortable.exe: Trojan.Small-8101 FOUND
G:\PortableApps\WinBoardPortable\WinBoardPortable.exe: moved/scheduled to 'G:\PortableApps\ClamWinPortable\Data\quarantine\infected.WinBoardPortable.exe'
G:\PortableApps\HMNISEditPortable\App\NSIS\Stubs\bzip2: Trojan.PSW.IEPass FOUND
G:\PortableApps\HMNISEditPortable\App\NSIS\Stubs\bzip2: moved/scheduled to 'G:\PortableApps\ClamWinPortable\Data\quarantine\infected.bzip2'
G:\PortableApps\HMNISEditPortable\App\NSIS\Stubs\bzip2_solid: Trojan.DNSChanger-3789 FOUND
G:\PortableApps\HMNISEditPortable\App\NSIS\Stubs\bzip2_solid: moved/scheduled to 'G:\PortableApps\ClamWinPortable\Data\quarantine\infected.bzip2_solid'
G:\PortableApps\OpenOfficePortableTest\App\OpenOffice.org\Basis 3.0\program\scmi.dll: Trojan.Hupigon-9851 FOUND
G:\PortableApps\OpenOfficePortableTest\App\OpenOffice.org\Basis 3.0\program\scmi.dll: moved/scheduled to 'G:\PortableApps\ClamWinPortable\Data\quarantine\infected.scmi.dll'
----------- SCAN SUMMARY -----------
Known viruses: 365263
Engine version: 0.93.1
Scanned directories: 2082
Scanned files: 20485
Infected files: 6
Not copied: 1
Data scanned: 1252.16 MB
Time: 1144.422 sec (19 m 4 s)
Now I know these are not viruses, but probably just the way the files were compiled. My question is this: Is there a way to set ClamWin to ignore certain files during a scan? I like to have it set to automatically quarantine infected files and it gets to be a pain in the butt to keep having to return the files to their proper places after every time I run a scan. I'm sorry if this has been asked before but I couldn't find anything about it.
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
You may use Tools/Preferences/Filters/Exclude matching filenames to set ClamWin to ignore certain files.
The better solution in general is to submit the suspicious files as false positives so ClamAV can update their database.
Wow. Thanks for the link. I had no idea you could submit files to their database.
Tools/Options/Filters ....
But why on Earth do you like to have a stupid AV-proggie
make decisions on it's own ?
In the case of ClamWin it doesn't make any sense at all since Clam doesn't have real-time protection .
That's a good point. I never thought of it that way.
In support of a previous article on the same subject...
As a Modification Request to the software I'd prefer clamwin ignore its own quarantine directory. Since the General Tab, (located Tools/Preferences command) already contains this information in the Infected File dialogue, it makes little sense to me to; a) move the "alleged" infected file(s) to this location then; b) continue to find the same files on subsequent scans.
At least I can then have the opportunity to valid whether the offending file is a true positive or not, without being nagged about it.
Further - renaming a target or offending file with the extension "000" makes sense the first time, however to keep renaming it several times does not.
Thanks in advance for providing software we can all contribute too.
Kevin