GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun May 03, 2009 2:32 pm |
|
 |
 |
 |
 |
ClamWin Can report infections to you, it can remove infected files to a quarantine folder, or it can delete the entire file. It cannont cure/repair/fix any infections. You should be very careful about quarantining or removing, however, because of "false positive" infections. A false positive infection occurs when Clamwin falsely believes a file is infected, although it is not a real infection. In a case like this, if it has a false positive on an important Windows file, if it removed/quarantined the file, you could lose access to your Windows operating system. If the false positive is on an important program (MS Office perhaps), you could lose access to the program and have to restore it.
You should verify all infections before doing anything with the infected file. You can do this by uploading the file to Jotti or VirusTotal, which are two free services on the web that scan files with multiple antivirus programs, including Clam. If several AVs spot a file as infected (I like to see at least five AVs), it is probably a real infection and not a false positive, so you can manually delete it or have ClamWin quarantine/remove it for you. Jotti is a https://virusscan.jotti.org/ on the web and VirusTotal is at https://www.virustotal.com/ on the web.
ClamWin comes preconfigured with the Report Only option for infected files, and I suggest you leave it like that.
Dr. Web's Cureit program is good for removing infections, and Malwarebytes' Anti-Malware program is also good. Check out the Clamwin Antimalware page for more information.
Regards,
|