stdnt4vr
Joined: 27 Sep 2010 |
Posts: 0 |
|
|
 |
Posted: Tue Sep 08, 2015 1:32 pm |
|
 |
 |
 |
 |
Hello. I recently completed a virus scan. The scan found many infected files but none of them were moved to the quarantine folder so a repeat scan just shows the same results. Yes, the 'move to quarantine' option is selected in the Preferences tab. And it has successfully moved files there in the past but not lately. Is it at all possible that the quarantine folder is full and needs to be cleared/deleted? Not sure how to do this function. Any help is greatly appreciated. Thx!
|
|
ROCKNROLLKID
Joined: 23 Sep 2013 |
Posts: 0 |
Location: **UNKNOWN** |
|
 |
Posted: Tue Sep 08, 2015 2:57 pm |
|
 |
 |
 |
 |
You can manage the quarantine with a file called "QRecovery" located in your ClamWin install directory.
I am not aware of any limits that Alch or the ClamAV team has put on the quarantine folder, however, I do know sometimes ClamWin detects a file and says it quarantines it, but never actually does. You can notice this very well with Clam Sentinel, too.
|
|
stdnt4vr
Joined: 27 Sep 2010 |
Posts: 0 |
|
|
 |
Posted: Tue Sep 08, 2015 4:39 pm |
|
 |
 |
 |
 |
Thank you for the prompt reply. I did find the QRecovery file though I'm not clear how I would delete the files inside if I was interested. It seems the only options are 'select' and 'restore all'.
Clamwin is definitely not quarantining those files nor is it saying it is doing so. So if you or your team come up with any thoughts/explanations/solutions about that, please let me know.
I am not familiar with Clam Sentinel. Could you please give me some details? Is that an addendum/supplemental program?
|
|
ROCKNROLLKID
Joined: 23 Sep 2013 |
Posts: 0 |
Location: **UNKNOWN** |
|
 |
Posted: Tue Sep 08, 2015 7:29 pm |
|
 |
 |
 |
 |
Clam Sentinel is an add-on for ClamWin that adds a real-time scanner and basic heuristics (currently GuitarBob and I are looking on improving the heuristics). You can view the homepage here: https://clamsentinel.sourceforge.net/
As for deleting items in the quarantine, you can do it manually by going to C:/Users/Username/AppData/roaming/.clamwin/quarantine.
I have requested, in the past, for Alch to be able to delete files using QRecovery and a way to navigate to it through the GUI, but it has not happened, yet.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Sep 08, 2015 10:32 pm |
|
 |
 |
 |
 |
The Quarantine access program used by Clam Sentinel is very good--much better than Clam Win's version, and it has functions not available in CamWin's version.
Regards.
|
|
stdnt4vr
Joined: 27 Sep 2010 |
Posts: 0 |
|
|
 |
Posted: Tue Sep 08, 2015 11:04 pm |
|
 |
 |
 |
 |
Thanks again for the info. I will definitely give Clam Sentinel a try as ClamWin is still not moving the infected files to quarantine.
Also, that path you suggested to manually delete quarantined files does not work as I do not have all those folders on my computer.
Finally, I am noticing there are now an enormous number of files that ClamWin cannot access during a scan that say "permission denied" if you have any thoughts about that.
|
|
ROCKNROLLKID
Joined: 23 Sep 2013 |
Posts: 0 |
Location: **UNKNOWN** |
|
 |
Posted: Wed Sep 09, 2015 12:22 am |
|
 |
 |
 |
 |
The permission denied files are nothing to worry about. Those are usually system files that cannot by access by the scanner. All AVs have this, but most don't tell about it.
If you cant see the folders, then you should go to control panel/Folder options and under the View tab make sure you have "To show all hidden folders" You should be able to see all the folders now.
One more thing about Sentinel, you need to have ClamWin installed as they work together.
|
|