ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Did the program get rid of my infected files?
vbarrio


Joined: 04 Jan 2008
Posts: 0
Location: Loranger, Louisiana
Reply with quote
I selected to scan my C drive.
The following came up after a little over an hour and a half, and showed 5 infected files, but it does not state that anything was done with the infected files, nor was I given a choice of what to do. Did the antivirus program just scan my drive or did it also get rid of the 5 infected files? I can not tell?

H E L P !!!
vbarrio@hughes.net
Confused
Scan Started Thu Jan 03 09:48:56 2008
-------------------------------------------------------------------------------

c:\WINDOWS\SYSTEM\orpfcuvp.exe: Adware.Hotbar FOUND
c:\WINDOWS\SYSTEM\xpuupdate.exe: Trojan.Downloader-12740 FOUND
c:\WINDOWS\TEMP\SpamBlockerUtilityU.exe: Adware.Hotbar FOUND
c:\WINDOWS\Temporary Internet Files\Content.IE5\C1NXM5WP\exitpop[1].htm: JS.NoClose.A FOUND
c:\My Documents\xpuupdate.exe: Trojan.Downloader-12740 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 185729
Engine version: 0.91.2
Scanned directories: 2527
Scanned files: 62759
Skipped non-executable files: 904
Infected files: 5
Data scanned: 5525.91 MB
Time: 11473.770 sec (191 m 13 s)
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
You can configure ClamWin's General Preferences to Report malware it founds , Remove it, or Move it to the Quarantine folder. The default is to Report malware it finds to you, so if you haven't changed the default, Clamwin has reported it to you. The ClamWin scan report tells you the location of the malware on your hard drive so you can do something about it.

I leave the default to Report--because I don't want to immediately remove any important file file--even if it is infected, and I don't want to move it to Quarantine and lose access to Windows--like I did once on a "false positive" for Winlogon.

I suggest you firs upload a copy of the infected file to VirusTotal or Jotti and see what other AV software says about it. If at least four other AVs also spot malware, it's probably really infected, and you should delete the file from your hard drive or clean/reinstall it if it is an important file. If only a few other AVs spot malware, it's probably a false positive, and you should tell the ClamAV people about it so they can change the signature.

To stay "lean and mean," Clam/ClamWin don't bother with any "cleaning." It's hard to remove all traces of much of the current malware. You can sometimes get manual removal instructions/tools on some of the Web sites of the large AVs--try McAfee, Symantec or Kaspersky.

Regards,
View user's profileSend private message
Did the program get rid of my infected files?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic