ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Deleting Infected Files
FrankieBoy


Joined: 18 Dec 2016
Posts: 0
Location: PA
Reply with quote
How do I delete the files in the Quarantine Folder?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
The simplest way to delete a file from quarantine is to just go to the ClamWin quarantine folder (C:\ProgramData\.clamwin\quarantine), find the file, right click on it, and select delete. The Qrecover program in the C:\Program Files (x86)\ClamWin\bin folder is only good for restoring files from quarantine that are falsely detected (false positive). If you are using Clam Sentinel along with ClamWin , you can select the Sentinel Recover program from the Clam Sentinel system tray icon menu (select Quarantine, Sentinel Recover, tick the file, and select the red X to delete).

Thanks for using ClamWin!
View user's profileSend private message
Infected files in WinXP
yagottabob


Joined: 28 Oct 2012
Posts: 0
Reply with quote
Where do I find and clean infected files with WinXP? Do I need to use the command prompt?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin comes with a default Infected File option of Report Only. There are two more options: Remove and Quarantine. You can select to quarantine infected files in the Tools, Preferences, General tab. Select Quarantine and OK it. Don't ever select Remove--in case a file is falsely-detected (a false positive), because you could lose an important file--maybe even your system if it is a falsely detected system file.

You can restore files from quarantine (if they are falsely detected) by going to the ClamWin program file folder in the bin subfolder and clicking on the QRecover.exe program. Some users have trouble doing it this way, so let us know if this ever happens to you.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
danccu


Joined: 30 May 2017
Posts: 0
Location: UK
Reply with quote
Is there any option to set the automatical remove of the infected files?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Yes, you can access the infected file options via the ClamWin Configure, General menu from the ClamWin system tray icon or via the Tools, Preferences, General menu from the ClamWin icon on your desktop. There are three infected file options: Report, Remove, or Quarantine. Remove is not recommended, to prevent reomval of a falsely-detected (false positive) file. Quarantine is probably best for most non-expert users. Items will stay in quarantine unless manualley deleted, and they are harmless there with a "infected" file extension.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
sikllindil


Joined: 26 Jun 2018
Posts: 0
Location: Tokyo, JPN
Reply with quote
Hello,

I Just finished a 3 days scan on my computer when in the report i see: Infected file 1.
The problem is that by default Clamwin doesn't delete or put the file in quarantine and doesn't give me neither the name of the file in the final report.

It would be good to activate the quarantine by default.

How to find the infected file in the report without re-scanning my whole computer?

THank you in advance Smile
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Did you read the previous posts above? They tell you how to change the infected file option from the default Report to Quarantine or Remove (never choose remove). I suggest you change the option and do another scan. If you do not want to do that, you can probably locate the infected file somewhere in the previous scan report.

By the way, three days is too long for a scan.

Also, for best protection, use ClamWin as a backup AV scanner to a real-time AV scanner.

Regards,
View user's profileSend private message
sikllindil


Joined: 26 Jun 2018
Posts: 0
Location: Tokyo, JPN
Reply with quote
Thanks for your answer.

Yes I read previous post, otherwise I wouldn't have been able to write my last post (as I am talking about option setting).

Is there a keyword in the scan report which could help me to locate the line talking about the virus?

Thank you
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
The ClamWin scan report will report a FOUND at the end of the line scanned when it detects something and the infected file option is set to Report Only. That will be preceded by the folder and filename.

When the report option is set to Quarantine, the scan report will report INFECTED at the end of the line scanned.

Regards,
View user's profileSend private message
Joannme20


Joined: 16 Mar 2019
Posts: 0
Location: Pagadian City
Reply with quote
I want to make a copy of my file then delete it afterwards but when I looked at my files I can't find it. Maybe it's hidden, how can I search a file that has been corrupted by the virus?
Quote:


Joined: 09 Jul 2006
Posts: 4448
Location: USA

Post Posted: Sun Dec 18, 2016 3:30 am Reply with quote

The simplest way to delete a file from quarantine is to just go to the ClamWin quarantine folder (C:\ProgramData\.clamwin\quarantine), find the file, right click on it, and select delete. The Qrecover program in the C:\Program Files (x86)\ClamWin\bin folder is only good for restoring files from quarantine that are falsely detected (false positive). If you are using Clam Sentinel along with ClamWin , you can select the Sentinel Recover program from the Clam Sentinel system tray icon menu (select Quarantine, Sentinel Recover, tick the file, and select the red X to delete).

Thanks for using ClamWin!
View user's profileSend private message
Deleting Infected Files
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic