hi

I ran Clamwin with the move to quarantine option active. The files it quarantined were taskmanager16.exe and some IMVU files thinking they were trojans.

I don't think these are worthy of quarantine so can you advise how I unquarantine these files?

thnx

cob....

Hello,
As per my knowledge there is presently no automatic function in Clamwin to restore quarantined file in the original position, so the thing has be done manually for each file. Here below is the explanation Guitarbob made on another thread, so I just quote it:

The scan logs will tell you the source of an infection, and you can use Windows Explorer to move the file back to where it was. You will have to remove the "infectedDOT" and "DOTren" from the name that ClamWin inserts in the filename when it is quarantined before you can use it again. The Windows directory files are the most important, of course, but many infectons just put a file in the Windows directory and the system32 subdirectory.

Quarantined files can be found under
C:\Documents and Settings\All Users\.clamwin\quarantine


To avoid Clamwin puts the files again in quarantine on next scan set Clamwin Preferences tab to 'Report only' so it will only tell you that infected files were found just giving the exact path for each of them.
This is safer behaviour in case detected files reveal to be false positive. In such cases upload suspected file to
https://www.virustotal.com/
to check if also other AV's spot the same file as malware. If most part of them don't it is probably a false positive then pls notify ClamAV team by using the form at https://cgi.clamav.net/sendvirus.cgi. You will help the Clam community to get an improved AV software.

Hope this helps,
Antonio

hi

when I go to the quarantine directory it's empty.... but interestingly if I do a search for one of the files then it can be seen...

Hello,
not quite sure if I am doing right (I am not a computer expert, therefore my reply could not be satisfactory) but on the Control Panel the Folder options should have the visualisation of hidden files enabled. This way you should be seeing the files in the folder.

Hope this helps,
Antonio