Title: ClamAV & False Positives
Last modified: August 31, 2016

---

# ClamAV & False Positives

 *  Resolved [crichbaptist](https://wordpress.org/support/users/crichbaptist/)
 * (@crichbaptist)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/clamav-false-positives/)
 * Hi nosilver4u,
 * Like several others I have been advised by our webhost about their malware scanner‘
   catching’ alleged suspicious files. The initial e-mail from the host contained
   the following, which I have edited for brevity:
 * “I’m using a new malware scanner and protection system, and it has been catching
   what it sees as suspicious exe files in your ….. ewww-image-optimizer directory.
 * The scanner reported these files overnight:
 * ……./ewww-image-optimizer/optipng.exe: Win.Adware.Softpulse-215 FOUND
    ……./ewww-
   image-optimizer/optipng.exe: Win.Adware.Softpulse-215 FOUND”
 * From the forum correspondence which I have seen I am aware that although ClamAV
   is declaring these files as malware, you are confident they are ‘false positives’.
 * Maybe I overreacted, but given my host’s concern, and not wanting to have our
   site taken down through no action on my part I, hopefully temporarily, deactivated
   and deleted EWWW Image Optimizer.
 * Since then I have been in regular contact with the host, and following my latest
   e-mail to them in which I gave them your own latest comments (taken from the 
   forum) they have come back and commented as follows:
 * “We do run ClamAV but the files which are registering hits are Windows exe files
   that do not run on Linux. Removing those files will have no negative impact if
   you want to use the plugin, because on Linux the optimization is done with different
   binary files than those exe files.”
 * Would you be able to comment on on the Windows .exe files not running on Linux(
   their system), and what they say that “the optimization is done with diffrent
   binary files than those .exe files” ?
 * I do still want to use EWWW Image Optimizer, but the situation is getting a little
   confusing, as I have also read where you say that files such as optipng.exe are
   essential for the plugin to work.
 * Regards,
 * Alan
 * [https://wordpress.org/plugins/ewww-image-optimizer/](https://wordpress.org/plugins/ewww-image-optimizer/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [Shane Bishop](https://wordpress.org/support/users/nosilver4u/)
 * (@nosilver4u)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/clamav-false-positives/#post-6967137)
 * The file optipng.exe is not necessary on a Linux webhost, so it can be safely
   deleted from your server and EWWW IO will remain fully functional.
 * However, even if you delete it, it will be downloaded again with the next plugin
   update (coming today or tomorrow). You can delete optipng.exe again if ClamAV
   hasn’t fixed the errant signatures yet, but just wanted you to be aware that 
   an update is coming soon.
 *  Plugin Author [Shane Bishop](https://wordpress.org/support/users/nosilver4u/)
 * (@nosilver4u)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/clamav-false-positives/#post-6967275)
 * [https://wordpress.org/support/topic/false-positive-on-virus-scan?replies=9](https://wordpress.org/support/topic/false-positive-on-virus-scan?replies=9)

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘ClamAV & False Positives’ is closed to new replies.

 * ![](https://ps.w.org/ewww-image-optimizer/assets/icon-256x256.png?rev=1582276)
 * [EWWW Image Optimizer](https://wordpress.org/plugins/ewww-image-optimizer/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ewww-image-optimizer/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ewww-image-optimizer/)
 * [Active Topics](https://wordpress.org/support/plugin/ewww-image-optimizer/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ewww-image-optimizer/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ewww-image-optimizer/reviews/)

## Tags

 * [false positive](https://wordpress.org/support/topic-tag/false-positive/)

 * 2 replies
 * 2 participants
 * Last reply from: [Shane Bishop](https://wordpress.org/support/users/nosilver4u/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/clamav-false-positives/#post-6967275)
 * Status: resolved