Hi..

I have just discovered Clamwin so I had to test it..
Correct me if I am wrong But why is the
NO option to try and clean an infected file if discovered???

That kinda option in a antivirus program is a must,,I mean otherwise the program is more
or less useless..

Sorry for my bad english

Scortech

Hi,

the main purpose of an antivirus is to keep your system free from viruses. When ClamWin finds a virus, it will move it to a safe quarantine map, delete it or just report it, according to the selected preferences.
Trying to clean an infected file would be a rather complicated task, with no guarantee that the fix was correct.

When an file was moved to quarantine, it's up to the user to decide if it is needed or not. If it is needed, you should get the original file from the install source, unless you are absolutely sure there is no harm in moving the file back from quarantine to it's original location.

some years ago virus was coded in asm and was self-attaching to executables, in this case the action "clean" would have sense to remove the viral code from the executable.
Nowadays, so-called virus are really piece of standalone code that send itself using email, so no code need to be "saved" from them

Some of the capable commercial antivirus software (such as AVG from Grisoft) doesn't do much cleaning of viruses. That functionality would intriduce additional complexity and "bloat" in the software. They make additional cleaning software to get rid of viruses. Some of the software cleans a variety of viruses, and some of it is dedicated to cleaning only one, or a few, viruses.

With all the possibilities of viruses out there, I think it's pretty good that ClamWin can identify a good portion of them. If we update it frequently and act responsably in what we allow to be put on our computer(s), we'll probably be all right. In the unlikely event that we do get a virus, we will know what it is, and then we can go about repairing the damage.


Regards,

I have just scanned my disk with Clam,
and it reports that it has located a backdoor in an old mailbox : Exploit.IFrame.Gen

I Thought that the virus then was removed,
tested it with AVG, no virus found,
tested the whole disk again with Clam,
and the virus was still there !

What do I do to remove it ?

Can I rely on :
https://www.paretologic.com/
or
www.NoAdware.net

How old are you talking about? ClamWin doesn't have a lot of the old signatures in its database. Try to verify if it actually has that signature in its database.

You might try one of the free online virus scans--say Kaspersky, Bit Defender, or McAfee and see what they say. If one of them says you also have the virus, you probably do. Keep in mind that they might not clean it for you, but they may have cleaning software available.

The two sites you mentioned primarily deal with adware, so I don't know if they would find an old exploit.

That's about all I can suggest.

Regards,

The mailbox is from 2002.

After moving some of the messages to trash, compacting mailboxes, moving more ms. to tr. compacting, a.s.o.
moving all ms. back again, checking the mailbox in between, to see in which part of the 3000 ms. the virus was located, - finally the virus was gone

I'm glad you found it.

A search of the signature database at the ClamAV Project site brought
up Exploit.IFrame.Gen, and it appears to be a 2006 entry, but I could be wrong.
There was no description and VirusList.Com didn't have one either. It was listed
there with 30 viruses called Email worms, and it was in a group called
Email Worm-W32Avron a through d. Seems to be sort of a standard
worm--spread by SMTP, MS Outlook, and Windows MAPI. Kaspersky and
others called it something else, but if they listed it, there was
probably some removal/cleaning software available at their Web sites.

Regards,