TheZeeman
Joined: 05 Dec 2011 |
Posts: 0 |
|
|
 |
Posted: Mon Dec 05, 2011 2:35 pm |
|
 |
 |
 |
 |
I have scanned my computer to remove the "System Fix" virus.
The scan has created a log with 7 infected objects found.
However, there is no option to "remove" or "quarantine." When I go to the General Preferences tab and select "Remove (Use Carefully)," I receive the following error message with typos:
"An error occurred whilst saving configuration file. C:\Users\Zeeman\AppData\Roaming\ClamWin.conf. Please check that you have write permsiison to the configuratuion file."
How do I now remove the 7 infected files without re-scanning? Thanks, Z
|
|
TheZeeman
Joined: 05 Dec 2011 |
Posts: 0 |
|
|
 |
Posted: Mon Dec 05, 2011 2:49 pm |
|
 |
 |
 |
 |
Here are the files found. Should I just go to the location and manually delete them? Thx
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBMedia.exe: Trojan.Fakealert.Sesh FOUND
C:\Users\Zeeman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRAZM4U7\rkill.exe: Trojan.Hupigon-33703 FOUND
C:\Users\Zeeman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPFPX3JY\rkill.com: Trojan.Hupigon-33703 FOUND
C:\Users\Zeeman\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\47a2e8ae-6ced7412: Java.Openconnection-3 FOUND
C:\Users\Zeeman\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\1be95149-56f27bae: Java.Openconnection-3 FOUND
C:\Users\Zeeman\Desktop\AntiVirus & Recovery\rkill.exe: Trojan.Hupigon-33703 FOUND
C:\Users\Zeeman\Downloads\rkill.com: Trojan.Hupigon-33703 FOUND
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Dec 05, 2011 6:13 pm |
|
 |
 |
 |
 |
In my opinion, you should set ClamWin to Quarantine a file. Never remove it--in case of a "false positive" detection you will have lost the file. Once a file is quarantined and your system runs okay, then you can go to quarantine and remove it. If it turns out to be a false positive detection (not a real virus), you can use the ClamWin Restore program to put it back where it belongs (after you have submitted the file to Clam AV as a false positive and they have corrected it--usually in 2 or 3 days.
See if you can sign on your computer as Administrator and then configure the ClamWin infected files option to Quarantine. If you are sure a file is a virus (check with Jotti or Virus Total) and you are unable to quarantine it, then you can manually delete it.
See the ClamWin Antimalware page for locations for Clam AV submissions and Jotti/Virus total sites.
Please get back here with any questions.
Regards,
|
|