ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
How to get rid of infected files
Tomjj


Joined: 28 Apr 2009
Posts: 0
Location: ohio
Reply with quote
I have clamware. How do you get delete infected files once the clamware finds them??? I do not see anyway to get rid of them. Any help will be apreciated.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I'm not sure what you mean by Clamware. This is the forum for ClamWin free antivirus, so perhaps you mean that you have ClamWin freeware antivirus. If you have some other antivirus besides ClamWin, we cannot help you.

If you have ClamWin installed on your computer, right click your mouse on the clam icon in your system tray to bring up a menu. You can operate or use the basic functions of the antivirus program from here. From this menu, click on Configure ClamWin to bring up the ClamWin Preferences tabs. You should get familiar with them., but right now you just want the General preferences. You shouldl probably leave most of the default preferences alone. The Infected Files section tells ClamWin what you want to do with infected files. The default is Report Only. If you continue to use this, ClamWin will only report when it finds a virus infection and where it is. I prefer to leave it like that, and upload an infected file to Jotti or VirusTotal on the web. If at least four scanners there find a file is infected, I assume it is, and I then delete it from my computer--unless it is an important Windows system file. If you delete an important file like that, you could lose access to your Windows operating system, so you should not delete it but replace it with a good copy if it is infected.

You can change the Infected Files preference to Quarantine, and many people do this. This tells ClamWin to put infected files in its quarantine folder where they cannot harm your computer. Again, however, if you quarantine an important Windows file, you could lose access to your Windows operating system. As I said, I prefer to Report Only and then manually delete any infected files if Jotti or Virus Total say they are infected.

I hope this helps you. The Help file and FAQ items may help you also. Please come back here if you still have questions, and thank you for using ClamWin.
View user's profileSend private message
quickheal
imjames407


Joined: 29 Apr 2009
Posts: 0
Reply with quote
You can go with quickheal software for removing virus.
View user's profileSend private message
pressley5


Joined: 09 Mar 2007
Posts: 0
Reply with quote
Like others I've set up infected folders to go to quarantine, and now, of course, I cannot upload them to virus total to check them out. In reviewing the quarantine log though, I see that a number of the files have a "date modified" which is years before I even bought the computer (new).

For example, I bought this computer December 2008, but this is one of the files clamwin found:

XL12CNV.EXE.infected 10/26/2006 INFECTED
XL12CNV.EXE.infected 10/2/2007 000 File

My guess is that these are really old files that are floating around the internet, that the bad guys haven't touched in a while. Someone please interpret for me. Can I delete files on my computer that clamwin identifies as infected, if they are older than the computer?

What is an 000 File anyway?

While in quarantine I scanned some of the files with clamwin and they didn't show as infected. What am I missing? The more I look the more I don't know!!

Thank you! Thank you!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Your files look okay to me--based on your information.

Here is a link to some information about those files at https://www.pc1news.com/files/97045-xl12cnv-exe.html on the web. I would upload one of them to Jotti at https://www.pc1news.com/videos/clean-your-pc-with-ccleaner-33.html on the web or VirusTotal at https://www.virustotal.com/ on the web. Either service will provide you with a free scan with multiple antiviruses, including Clam. If only a few AVs besides Clam find an infection (I like to see at least 5 AVs detect something), it's probably a false positive detection by Clam/ClamWin. Report false positives to Clam at https://www.clamav.net/sendvirus/ on the web. ClamWin has been a little "false positive" touchy since version .95.1 with Microsoft files.

I'm not sure what that 000 file is, but I wouldn't worry too much about those file dates, although sophisticated malware will sometimes change the date. Right click on the file and select Properties. Look at the General tab and check the created, modified and accessed dates for more information. See if anything there looks "funny." I'll bet everything looks okay. I've sometimes seen malware change the creation date but not the modified date--resulting in a modification date older than the creation date!

Regards,
View user's profileSend private message
How to get rid of infected files
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic