GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Sep 10, 2012 2:11 am |
|
 |
 |
 |
 |
If you configure the ClamWin General, configuration, infected file option to Report Only, infected files will be reported to you, and you can either manually more the file to quarantine or set the infected file option to Quarantine and then scan the file manually if it is actually infected, but you will have to set the option back to Report Only. If you move the file to ClamWin manually, there is no possibility of automatically restoring it in the future.
In my opinion, it would be best to quarantine all infected files, upload the file to Jotti or Virus Total to check it out, and then restore it automatically (via the ClamWin Quarantine Browser program) if is not really infected. You should report all false detections (false positives) to Clam AV so they can correct the signature for all ClamWin users. You can exclude a file via the Filters tab, Exclude Matching Filenames for a few days until Clam corrects their signature.
As for excluding zip, rar, and other archive file types, you can just untick the Extract From Archives block in ClamWin configuration, Limits. ClamWin will then just do a raw scan on the archive files and not unzip them. ClamWin does not generally have any signatures on zipped files.
Regards,
|