Hi,

i'm new to clamwin, but i got a lot of recommendations from co workers for free antivirus.


I scanned my computer and found a virus but i can't seem to figure out if it was deleted or quarantined.

It just shows the report.


Does ClamWin actually remove the file upon detection or i have to manually remove the file myself?
*if i have to manually remove it, please tell me how.

Thanks.

Look in your ClamWin General Preferences. It comes with a default of Report Only. You can change it to Remove (not recommended) or Quarantine (the quarantine location is shown beside the quarantine preference block). Forget Remove--you don't want to remove an important file it it is a false positive detection. I also do not use quarantine for the same reason--I had a false positive detection once on Winlogon, and I lost my system for a day.

The ClamWin scan report will show the location of any file found as infected on your computer. You can go to Jotti at https://virusscan.jotti.org/ on line or VirusTotal at https://www.virustotal.com/ on line and upload the file for a free scan. If several other antiviruses there besides Clam find a file is infected, it's probably a real infection and you can delete the file from your computer (restore from backup if it's an important file/program). If only a couple of AVs find an infection, it's probably a false positive. In that case, go to the Clam submission form at https://cgi.clamav.net/sendvirus.cgi on the Web and fill out the form (be sure to check False Positive and put the name of the false detection in the virus name block and provide an explanation of why it's false in the description block). This is the same place to submit a file containing a virus that Clam/ClamWin doesn't detect.

I hope this helps.

Regards,

thanks =)

that helps a bit.