Would it be worth it to have ClamWin set up a restore point prior to placing any Windows files in quarantine--in case it is a false positive?

Regards,

While theoretically possible, it's pretty unlikely that any actual Windows system file would be caught as a false positive. Even if it were, the whole point of quarantine is so that the file still exists in case it is a false positive and you can copy it back. The log of the scan will tell you where the file was before it was quarantined.

So I'd suggest that unless you switch from quarantine to deleting, a restore point isn't needed.

Kurt, last year Clam had a false positive in Winlogon. Back then, I had configured ClamWin to quarantine. As a result, the Winlogon file was in quarantine, and I was unable to access my Win XP system. Not knowing what was going on, and not being a "techie," I tried to reinstall Win XP and had some problems doing so, so I was forced to use the Dell feature to restore my system back to what it was when I purchased it two years prior. I lost a couple of days during the whole process. After I got my system up again, I learned about the false positive, and I learned there were some ways to avoid all the work I went through.

I now use the Report Only option, but I'm just trying to think of a way to help someone else who might not. Clam still has a system false positive now and then.

Regards,