mickeydeemouse
Joined: 16 Nov 2008 |
Posts: 0 |
|
|
 |
Posted: Sun Nov 16, 2008 4:26 am |
|
 |
 |
 |
 |
Okay i just done a full scan...i am infected and made a report should i quarintine or what should i do to remove all this?
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Nov 16, 2008 7:56 am |
|
 |
 |
 |
 |
ClamWin comes with a default of Report Only when it finds an infection. Other choices are Quarantine and Remove. You need to be careful about removing and quarantining false positives (cases where ClamWin reports a file is infected but it is not). If you have a false positive in an important file, you could lose it, and if it is a system file, you could lose your system.
I prefer to keep the default and upload a copy of any file it reports as infected to Jotti or to VirusTotal. Either one will scan a file for free with multiple antiviruses. If more than a couple of other AVs besides Clam find an infection, it probably is a real infection and not a false positive. In that case, you can either go to the location of the file (see the ClamWin scan report) and remove it manually or set the report preference to either Quarantine or Remove (temporarily, I suggest)
If the file is a false postive, report it to Clam at https://cgi.clamav.net/sendvirus.cgi on the Web. False positives happen from time-to-time because malware is a program and occasionally uses similar coding to good programs.
Regards,
|
|