ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
No clean option
scortech


Joined: 25 Jul 2006
Posts: 1
Reply with quote
Hi..

I have just discovered Clamwin so I had to test it..
Correct me if I am wrong But why is the
NO option to try and clean an infected file if discovered???

That kinda option in a antivirus program is a must,,I mean otherwise the program is more
or less useless..

Sorry for my bad english

Scortech
View user's profileSend private message
budtse


Joined: 14 Jan 2006
Posts: 372
Location: Belgium
Reply with quote
Hi,

the main purpose of an antivirus is to keep your system free from viruses. When ClamWin finds a virus, it will move it to a safe quarantine map, delete it or just report it, according to the selected preferences.
Trying to clean an infected file would be a rather complicated task, with no guarantee that the fix was correct.

When an file was moved to quarantine, it's up to the user to decide if it is needed or not. If it is needed, you should get the original file from the install source, unless you are absolutely sure there is no harm in moving the file back from quarantine to it's original location.
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 898
Location: Italy
Reply with quote
some years ago virus was coded in asm and was self-attaching to executables, in this case the action "clean" would have sense to remove the viral code from the executable.
Nowadays, so-called virus are really piece of standalone code that send itself using email, so no code need to be "saved" from them Smile
View user's profileSend private message
NO Clean Option
GuitarBob


Joined: 09 Jul 2006
Posts: 4536
Location: USA
Reply with quote
Some of the capable commercial antivirus software (such as AVG from Grisoft) doesn't do much cleaning of viruses. That functionality would intriduce additional complexity and "bloat" in the software. They make additional cleaning software to get rid of viruses. Some of the software cleans a variety of viruses, and some of it is dedicated to cleaning only one, or a few, viruses.

With all the possibilities of viruses out there, I think it's pretty good that ClamWin can identify a good portion of them. If we update it frequently and act responsably in what we allow to be put on our computer(s), we'll probably be all right. In the unlikely event that we do get a virus, we will know what it is, and then we can go about repairing the damage.


Regards,
View user's profileSend private message
hansson


Joined: 31 Jul 2006
Posts: 3
Reply with quote
I have just scanned my disk with Clam,
and it reports that it has located a backdoor in an old mailbox : Exploit.IFrame.Gen

I Thought that the virus then was removed,
tested it with AVG, no virus found,
tested the whole disk again with Clam,
and the virus was still there !

What do I do to remove it ?

Can I rely on :
http://www.paretologic.com/
or
www.NoAdware.net
View user's profileSend private message
ClamWin Finds Old Exploit/AVG Doesn't
GuitarBob


Joined: 09 Jul 2006
Posts: 4536
Location: USA
Reply with quote
How old are you talking about? ClamWin doesn't have a lot of the old signatures in its database. Try to verify if it actually has that signature in its database.

You might try one of the free online virus scans--say Kaspersky, Bit Defender, or McAfee and see what they say. If one of them says you also have the virus, you probably do. Keep in mind that they might not clean it for you, but they may have cleaning software available.

The two sites you mentioned primarily deal with adware, so I don't know if they would find an old exploit.

That's about all I can suggest.

Regards,
View user's profileSend private message
hansson


Joined: 31 Jul 2006
Posts: 3
Reply with quote
The mailbox is from 2002.
View user's profileSend private message
hansson


Joined: 31 Jul 2006
Posts: 3
Reply with quote
After moving some of the messages to trash, compacting mailboxes, moving more ms. to tr. compacting, a.s.o.
moving all ms. back again, checking the mailbox in between, to see in which part of the 3000 ms. the virus was located, - finally the virus was gone Smile
View user's profileSend private message
Exploit.IFframe.Gen
GuitarBob


Joined: 09 Jul 2006
Posts: 4536
Location: USA
Reply with quote
I'm glad you found it.

A search of the signature database at the ClamAV Project site brought
up Exploit.IFrame.Gen, and it appears to be a 2006 entry, but I could be wrong.
There was no description and VirusList.Com didn't have one either. It was listed
there with 30 viruses called Email worms, and it was in a group called
Email Worm-W32Avron a through d. Seems to be sort of a standard
worm--spread by SMTP, MS Outlook, and Windows MAPI. Kaspersky and
others called it something else, but if they listed it, there was
probably some removal/cleaning software available at their Web sites.

Regards,
View user's profileSend private message
No clean option
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic