ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
viruses found message
kirschen


Joined: 05 Jun 2008
Posts: 0
Reply with quote
sometimes when i open my computer in the morning i am greeted by a clamwin popup that tells me that a scan has been finished and several viruses HAVE been found, and that I should look at the Virus Scan Report, which I don't understand anyway bcause of its technical nature. Were the viruses destroyed or not? if yes, why should i bother to look at the report? and if not ,what should i do to destroy them? Question
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin doesn't automatically delete infected files, and it can't "cure" them. The scan report tells you what viruses/malware ClamWin found on your computer and where they were located when spotted. What you then do depends upon what how you have configured ClamWin's General Preferences configuration menu for infected files: Report, Quarantine, or Remove. It comes with a default of Report--the report is what you see in the scan report/log.

You should not generally configure Clamwin to Remove--if there is a "false positive" on an important Windows file, it will be removed, and you will be unable to access/run Windows. If an important file is quarantined, you will have the same problem (happened to me once, and it took 2 days to restore Windows and get back to work). That's why I use Report, which tells you where the malware is on your computer. You can then go to the Jotti scan service on the Web at https://virusscan.jotti.org/ to upload the file and run a scan with many antivirus programs. If more than a couple of them also find an infection, it is probably not a false positive, and you can delete the file where it was on your computer.

Many people choose to configure ClamWin to quarantine, and you will generally be okay using it. If everything runs okay on your computer after something is quarantined, you can probably safely delete the file.

Regards,
View user's profileSend private message
kirschen


Joined: 05 Jun 2008
Posts: 0
Reply with quote
Hi!
Thanks for your prompt answer. In the meantime, untill I become more efficient i'll take your "report" and ""jotti" advice.
Is there a way to UNquarrantine a file that after the fact has been discovered to be a false positive. Smile
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
To "unquarrantine" a file, you will have to rename it to the original name and put it back in its original location on your directory using Windows Explorer. ClamWin renames the file when it goes into quarantine, but it doesn't "mangle" it too badly--you can probably tell what it is. It's been a while since I've seen one, but I think it puts "infected" in front of the original name, and it might put another extension at the end. You can get the name from the original scan report, however.

Regards,
View user's profileSend private message
viruses found message
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic