The Excel.exe may very well be a false positive, I had the same problem and
the digital signature was still intact. I submitted it as a false positve
to the signature team, but I don't know if they have gotten to it yet. Are
you using Office XP?
Michael M. Minor
On Fri, May 1, 2009 at 6:59 PM, Tom Metro
<tmetro+
clamwin32@gmail.com<tmetro%
2Bclamwin32@gmail.com>
> wrote:
> J.W. Michels wrote:
> > Each of the files in quarantine on my desktop is located on my laptop
> > as well (less the ".infected" addition.) So I am pretty certain they are
> not
> > viruses or trojans.
>
> What leads you to that conclusion? They could be existing files that
> became infected.
>
> Additionally, if you're running the same AV tools on the laptop, and
> they haven't been quarantined there, that's further evidence that
> there's something different (like an infection) about the ones on the
> desktop.
>
>
> > I downloaded my version of Clamwin from the Clamwin website.
>
> ClamWin is an independent project that makes use of ClamAV technology
> internally. Not to dismiss your questions, but you're better off posting
> your question about how to get your files out of quarantine on their
> forums:
>
> http://forums.clamwin.com/
>
> Their code is responsible for the quarantine action, once the AV engine
> says it is infected, so they'll know how to reverse it.
>
> And for your false positive question, you'll probably also reach more
> people there who are regularly scanning all the files on a Windows
> desktop. (Many users of the official win32 port only use it to scan
> email attachments.)
>
> -Tom
>
> --
> Tom Metro
> Venture Logic, Newton, MA, USA
> "Enterprise solutions through open source."
> Professional Profile: http://tmetro.venturelogic.com/
> _______________________________________________
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
>
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
(text/plain)