|
mattd1812
| Joined: 03 Apr 2009 |
| Posts: 0 |
|
|
|
 Posted: Fri Apr 03, 2009 12:53 pm |
|
 |
 |
|
|
We recently discovered that some Windows XP computers that we have put clamwin on have had the user32.dll removed by the false positive identification. What method does clamwin use to move the file to the quarantine directory? Normally you can't remove a system file, but somehow clamwin removed the user32.dll. Is there a way to identify this problem and repair it in some sort of automated way. I have a programming background and I am just not sure how to identify or fix the problem. Just a little guidance on where to start would be appreciated. Thanks
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Fri Apr 03, 2009 2:52 pm |
|
|
|
|
|
I don't have a programming background, so can't help there, but if you can come up with a way to restore system files from quarantine, that would be a valuable contribution to ClamWin. This is a needed function because it happens a couple of times a year. I once lost access to my system because of a FP on winlogon. Since then, I haven't used quarantine much.
Be sure and upload the FP file to Clam so they can adjust the signature.
Regards,
|
|
|
