|
Malice
| Joined: 02 Apr 2014 |
| Posts: 0 |
|
|
|
 Posted: Wed Apr 02, 2014 5:34 am |
|
 |
 |
|
|
Hello
Today i'm scan memory of my PC and massive false positive found
[spoiler]
E:\fiend\PApps\PortableApps\skypeportable\skypeportable.exe: Win.Adware.Wajam FOUND
E:\fiend\PApps\PortableApps\openhardwaremonitorportable\openhardwaremonitorportable.exe: Win.Adware.Wajam FOUND
E:\fiend\PApps\PortableApps\qBittorrentPortable\qBittorrentPortable.exe: Win.Adware.Wajam FOUND
E:\fiend\PApps\PortableApps\ProcessExplorerPortable\ProcessExplorerPortable.exe: Win.Adware.Wajam FOUND
E:\fiend\PApps\PortableApps\ClamWinPortable\ClamWinPortable.exe: Win.Adware.Wajam FOUND
[/spoiler]
Files has unloaded and deleted. How to restore it and load again?
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Wed Apr 02, 2014 1:03 pm |
|
|
|
|
|
The ClamWin infected file option can be set to Report Only, Quarantine, or Remove (never use this). The default is Report Only. You can not recover a file if it was removed. If you have the option set to Quarantine, you can use the ClamWin QRecover program to restore a quarantined file. You can access QRecover from the ClamWin programs\bin folder or via Start, All Programs, click ClamWin, click Quarantine Browser. You should whitelist the quarantined file via ClamWin's configuration, Filters, Exclude Matching Filenames before you scan again. You should also report this file to Clam AV at the Clam AV web site via the Report a File menu item (select report a false positive) so they can correct their signature for all users.
Regards,
|
|
|
