ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
QUARATINE
deturn


Joined: 08 Mar 2015
Posts: 2
Location: USA
Reply with quote
Hey, Forum. A question? What do you do with quarantined viruses? Thanks , Deturn
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
I check out quarantined files by going to the Virus Total online scanner and uploading them to the scanner to see what 57 other AVs say about the file. If it is not a virus, then it is a false positive detection, and I whitelist the file in ClamWin so it will not be detected again, and then I restore the file using the QRestore program in the ClamWin bin folder. The Clam AV team should get a copy of the file from Virus Total and correct their false signature within a couple of weeks, and you can remove the whitelisted item in ClamWin after that. I like to see at least 2 of these AVs verify a file is infected: Avira, Bitdefender, Nod32, Kaspersky, and Sophos. If the file is infected, you can then delete it from the quarantine folder or leave it in there. ClamWin gives it an "infected" extension, so it can not hurt anything.

Regards,
View user's profileSend private message
QUARATINE
deturn


Joined: 08 Mar 2015
Posts: 2
Location: USA
Reply with quote
Thanks, GuitarBob. I'll try that, Deturn
View user's profileSend private message
QUARATINE
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic