ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Reported infections
weshames


Joined: 09 Nov 2007
Posts: 0
Location: Wilsonville, Oregon
Reply with quote
My "Clam Log Viewer-Clam Scan Log.txt" shows a scan summary which lists two (2) infections. How do I get rid of the infections? Or are they already dealt with? My general configuration setup says to report infections only.

Thanks
View user's profileSend private messageSend e-mail
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
If you have set ClamWin's preferences to Report only, you will have to go to the folder where the reported malware is located and delete it manually. The scan report will tell you where the file is located. Even if you set preferences to Quarantine, you would still have to go to the Quarantine folder (described in ClamWin's General Preferences) and delete it yourself.

Before doing any deleting, however, to make sure it is not a "false positive," you should upload a copy of the malware to the Jotti online scanning service at https://virusscan.jotti.org/ on the Web and have it scanned with the 20 antivirus programs there, including Clam. If a couple of other AVs besides Clam say it contains malware, it is probably not a false positive, and you can safely delete it from your computer. If it is/was an important file, I hope you have a backup. VirusTotal is another good online scanning service located at https://www.virustotal.com/ on the Web.

In my opinion, it is better to Report than to Quarantine. I used to set my ClamWin to Quarantine, but I had a false positive once on an important Windows system file. It was relocated to the Quarantine folder, and I was unable to access Windows. Two days later when I had reinstalled everything, I set ClamWin preferences to Report Only.

Regards,
View user's profileSend private message
Thank you very much for your time and effort!!!
weshames


Joined: 09 Nov 2007
Posts: 0
Location: Wilsonville, Oregon
Reply with quote
GuitarBob wrote:
If you have set ClamWin's preferences to Report only, you will have to go to the folder where the reported malware is located and delete it manually. The scan report will tell you where the file is located. Even if you set preferences to Quarantine, you would still have to go to the Quarantine folder (described in ClamWin's General Preferences) and delete it yourself.

Before doing any deleting, however, to make sure it is not a "false positive," you should upload a copy of the malware to the Jotti online scanning service at https://virusscan.jotti.org/ on the Web and have it scanned with the 20 antivirus programs there, including Clam. If a couple of other AVs besides Clam say it contains malware, it is probably not a false positive, and you can safely delete it from your computer. If it is/was an important file, I hope you have a backup. VirusTotal is another good online scanning service located at https://www.virustotal.com/ on the Web.

In my opinion, it is better to Report than to Quarantine. I used to set my ClamWin to Quarantine, but I had a false positive once on an important Windows system file. It was relocated to the Quarantine folder, and I was unable to access Windows. Two days later when I had reinstalled everything, I set ClamWin preferences to Report Only.

Regards,
Very Happy Very Happy
View user's profileSend private messageSend e-mail
Reported infections
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic