ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
HOW TO: After Scanning
Ronan OF


Joined: 01 Aug 2008
Posts: 0
Location: Ireland
Reply with quote
Hello.

Just downloaded ClamWin and I am using it on a Windows XP machine.

Some items are highlighted in red, with FOUND at the end of the item.

How can I delete or separate these files so that they do not pose a problem again.

With thanks.
Ronan.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Welcome aboard!

In the General Preferences tab of ClamWin you can set how you want to treat infected files. You can Report Only (the default option), Remove (not a good idea in case of a false positive), or Quarantine. I prefer Report only because it is the safest option in case of false positives. I used to use Quarantine, but Clamwin had a false positive on an important Windows file one day and put it in my quarantine folder. I lost the operating system for a day until I restored Windows. If you do choose Quarantine, ClamWin will put infected files in the quarantine folder. Tthe location of the quarantine folder is shown below the Quarantine option in General Preferences.

The ClamWin scan report (right click on the ClamWin icon in your system tray, choose Display Reports, then Virus Scan Report) shows you where each infected file was located. If you chose to Report Only, you can navigate there using Windows Explorer and manually delete the file. If you chose Quarantine, you can go to the Quarantine folder and manually delete it there.

Before you delete a file, however, you should confirm it is a real infection and not a false positive. You can upload files (one at a time) to Jotti at https://virusscan.jotti.org/ on the web or to VirusTotal at https://www.virustotal.com/ on the web. Either one will do a free scan for you with multiple antivirus programs--including Clam. If several other AVs besides Clam find an infection, it is probably a real infection and not a false postive. If no other AV besides Clam or only a couple of other AVs besidses Clam find an infection, it is probably a false positive. You can report false positives to Clam on its submission page at https://cgi.clamav.net/sendvirus.cgi on the web. They will change their signature to remove the false postive within a day or sooner.

Regards,
View user's profileSend private message
HOW TO: After Scanning
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic