ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Help!
dr.crypto


Joined: 27 Sep 2017
Posts: 2
Reply with quote
I ran the scan report and it says I have an infected file. How do I remove it?

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe: Win.Trojan.Agent-1387801 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 6303017
Engine version: 0.98.6
Scanned directories: 28689
Scanned files: 123022
Infected files: 1
Not copied: 1
Data scanned: 23474.73 MB
Data read: 32059.88 MB (ratio 0.73:1)
Time: 99977.045 sec (1666 m 17 s)

I would be most grateful for any assistance.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4279
Location: USA
Reply with quote
ClamWin has 3 options for detected files--report, remove, or quarantine. The default installation option is to report it to the user. You can change it toa ny one of the other two. I recommend that you never set it to remove--because a file might be falsely detected as infected (a false positive), and if you remove it, it is gone forever. You could lose an important file that way. I always set this option to quarantine--because you are able to restore a false positive with the Windows QRestore program found in the ClamWin\bin folder. ClamWin has protection against false positive detections for important system files that prevents them from being quarantined or removed.

If you have not changed this option after installation of ClamWin, it is still set at report. The file has not been touched--it is still in the folder location indicated in the ClamWin scan report. You should verify if the file is really infected by uploading it to Virus Total online at https://www.virustotal.com/#/home/upload on the web, where you can see what about 60 antiviruses say about the file--including the Clam AV scanner that is used by ClamWin. I like to see at least 2 of these AVs say a file is infected before I believe it: Avira, Bitdefender, Eset Nod32, Kaspersky, and Sophos. If Clam AV is the only Av reporting an infection (or if only a few other AVs also agree), the file is most likely a false positive det3ection and you should exclude it from future scanning by ClamWin--check the Help menu item for assistance with this. If the file is really infected, you can set the infected file option to Quarantine, rescan, and it will be placed in the ClamWin quarantine folder, where it will not do any harm. You can delete the file manually from quarantine by going to the quarantine folder.

Check the Help option for assistance with operating ClamWin. Let us know if you have any problems.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
Thank you Guitar Bob!
dr.crypto


Joined: 27 Sep 2017
Posts: 2
Reply with quote
I really appreciate your help with this. Razz
View user's profileSend private message
Help!
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic