Ronan OF
Joined: 01 Aug 2008 |
Posts: 0 |
Location: Ireland |
|
 |
Posted: Fri Aug 01, 2008 5:48 pm |
|
 |
 |
 |
 |
Hello.
Just downloaded ClamWin and I am using it on a Windows XP machine.
Some items are highlighted in red, with FOUND at the end of the item.
How can I delete or separate these files so that they do not pose a problem again.
With thanks.
Ronan.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Fri Aug 01, 2008 9:18 pm |
|
 |
 |
 |
 |
Welcome aboard!
In the General Preferences tab of ClamWin you can set how you want to treat infected files. You can Report Only (the default option), Remove (not a good idea in case of a false positive), or Quarantine. I prefer Report only because it is the safest option in case of false positives. I used to use Quarantine, but Clamwin had a false positive on an important Windows file one day and put it in my quarantine folder. I lost the operating system for a day until I restored Windows. If you do choose Quarantine, ClamWin will put infected files in the quarantine folder. Tthe location of the quarantine folder is shown below the Quarantine option in General Preferences.
The ClamWin scan report (right click on the ClamWin icon in your system tray, choose Display Reports, then Virus Scan Report) shows you where each infected file was located. If you chose to Report Only, you can navigate there using Windows Explorer and manually delete the file. If you chose Quarantine, you can go to the Quarantine folder and manually delete it there.
Before you delete a file, however, you should confirm it is a real infection and not a false positive. You can upload files (one at a time) to Jotti at https://virusscan.jotti.org/ on the web or to VirusTotal at https://www.virustotal.com/ on the web. Either one will do a free scan for you with multiple antivirus programs--including Clam. If several other AVs besides Clam find an infection, it is probably a real infection and not a false postive. If no other AV besides Clam or only a couple of other AVs besidses Clam find an infection, it is probably a false positive. You can report false positives to Clam on its submission page at https://cgi.clamav.net/sendvirus.cgi on the web. They will change their signature to remove the false postive within a day or sooner.
Regards,
|
|