shark3r
Joined: 02 Oct 2018 |
Posts: 0 |
|
|
 |
Posted: Tue Oct 02, 2018 8:10 pm |
|
 |
 |
 |
 |
Does clam automatically remove any found viruses files?
on the log it reports the one found, but no confirmation as to whether they were removed or quarantined.
:\Program Files\UnHackMe\reanimator.exe: Win.Trojan.Zbot-6598057-0 FOUND
C:\ProgramData\RogueKiller\Quarantine\0285E8E6A99CBC62.vir: Win.Virus.Pioneer-6622830-0 FOUND
C:\Users\All Users\RogueKiller\Quarantine\0285E8E6A99CBC62.vir: Win.Virus.Pioneer-6622830-0 FOUND
C:\Users\Katie\AppData\Roaming\uTorrent\updates\3.5.4_44632.exe: Win.Virus.Pioneer-6622830-0 FOUND
C:\Users\Katie\AppData\Roaming\uTorrent\uTorrent.exe: Win.Virus.Pioneer-6622830-0 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 6666639
Engine version: 0.99.1
Scanned directories: 18888
Scanned files: 141233
Infected files: 5
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Oct 02, 2018 11:18 pm |
|
 |
 |
 |
 |
You indicated Clam AV (Linux), but I believe you are talking about ClamWin AV (Windows) which uses the Clam AV virus signatures and scanning engine, since the message you copied is a ClamWin scan message.
The ClamWin default preference option for infected file detections is Report Only. You can leave it like that or change it to Quarantine or Remove. We suggest that you do not ever use Remove because if the detection is false (a false positive), you can not use the ClamWin utility QRestore to restore the file to its original location (after excluding the file from future scans (via Tools, Preferences, Filters, Exclude Matching Filenames)). If you have not yet changed the infected file option, you should change it to Quarantine. ClamWin commands are available when you click/double click the ClamWin icon in the Windows system tray or click on the desktop icon.
You should report both false positive detections and undetected virus files to Clam AV via their Contact page at https://www.clamav.net/ on the web. There are separate links for false positives and undetected files--be sure to choose the correct one you want.
The ClamWin developers recommend that you use ClamWin in conjunction with a real-time antivirus program like Microsoft Windows Defender (free). There are other free/paid AV programs that are also available. ClamWin does not scan in real-time--it only scans "on demand" as scheduled or as you do a manual scan.
Thanks for using ClamWin!
Regards,
|
|