ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
2 quarrantined infected application programs
glow259


Joined: 30 Apr 2007
Posts: 0
Reply with quote
From Folder: C:\WINDOWS\All Users\.clamwin\quarantine

1. infected.itp32

Warning flag:
The infected file is a program. If you remove it, you will no longer be able to run this program, or edit some documents. Are you sure you want to move it to the recycle bin?


2. infected.remind32

Warning flag:
The infected file is a program. If you remove it, you will no longer be able to run this program, or edit some documents. Are you sure you want to to move it to the recycle bin?


I dont know how to take care, delete or get rid of the above. Please advise.

Thanks
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
To delete files from ClamWin's quarantine, go to your ClamWin quarantine directory in Windows Explorer, right click with your mouse on the file you want to delete, and select delete. If you are using, Windows XP, the quarantine directory is at C:\Documents and Settings\All Users\.clamwin\quarantine on your hard drive.

If you need detailed instructons and are using Windows XP, click START, Control Panel. Click your mouse in the address panel to get the cursor there and then type in the address line: C:\Documents and Settings\All Users\.clamwin\quarantine and then hit Enter or click on the green arrow. You will then be in the quarantine directory, where you can select the file you want to delete, right click on it, select delete, and it will be deleted. Do the same thing for each file you want to delete.

Sometimes (not very often) ClamWin (and other virus scanners can have a "false positive" and identify something as infected when it really isn't. For this reason, before deleting you might want to go to VirusTotal on the Web to upload the file there and have them check it out for free against about 30 virus scanners. After three or four minutes (depending upon how busy they are), you will get a report. If a couple of other scanners there besides Clam say the file is infected, it is a real infection and not a false positive. If it's infected, you can delete it. If it was a false positive, you can restore the file to the directory where ClamWin found it. ClamWin will probably rename the file in quarantine with .000 (a dot and three zeros) on the end, and/or insert "infected" in front of the file name, so you should rename a file to its original name before you restore it.

Regards,
View user's profileSend private message
2 quarrantined infected application programs
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic