 |
 | How to get rid of infected files |  |
Tomjj
Joined: 28 Apr 2009 |
Posts: 0 |
Location: ohio |
|
 |
Posted: Tue Apr 28, 2009 1:00 am |
|
 |
 |
 |
 |
I have clamware. How do you get delete infected files once the clamware finds them??? I do not see anyway to get rid of them. Any help will be apreciated.
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Apr 28, 2009 2:55 am |
|
 |
 |
 |
 |
I'm not sure what you mean by Clamware. This is the forum for ClamWin free antivirus, so perhaps you mean that you have ClamWin freeware antivirus. If you have some other antivirus besides ClamWin, we cannot help you.
If you have ClamWin installed on your computer, right click your mouse on the clam icon in your system tray to bring up a menu. You can operate or use the basic functions of the antivirus program from here. From this menu, click on Configure ClamWin to bring up the ClamWin Preferences tabs. You should get familiar with them., but right now you just want the General preferences. You shouldl probably leave most of the default preferences alone. The Infected Files section tells ClamWin what you want to do with infected files. The default is Report Only. If you continue to use this, ClamWin will only report when it finds a virus infection and where it is. I prefer to leave it like that, and upload an infected file to Jotti or VirusTotal on the web. If at least four scanners there find a file is infected, I assume it is, and I then delete it from my computer--unless it is an important Windows system file. If you delete an important file like that, you could lose access to your Windows operating system, so you should not delete it but replace it with a good copy if it is infected.
You can change the Infected Files preference to Quarantine, and many people do this. This tells ClamWin to put infected files in its quarantine folder where they cannot harm your computer. Again, however, if you quarantine an important Windows file, you could lose access to your Windows operating system. As I said, I prefer to Report Only and then manually delete any infected files if Jotti or Virus Total say they are infected.
I hope this helps you. The Help file and FAQ items may help you also. Please come back here if you still have questions, and thank you for using ClamWin.
|
|
 |
 | quickheal |  |
imjames407
Joined: 29 Apr 2009 |
Posts: 0 |
|
|
 |
Posted: Wed Apr 29, 2009 11:15 am |
|
 |
 |
 |
 |
You can go with quickheal software for removing virus.
|
|
 |
 | |  |
pressley5
Joined: 09 Mar 2007 |
Posts: 0 |
|
|
 |
Posted: Thu May 21, 2009 4:57 pm |
|
 |
 |
 |
 |
Like others I've set up infected folders to go to quarantine, and now, of course, I cannot upload them to virus total to check them out. In reviewing the quarantine log though, I see that a number of the files have a "date modified" which is years before I even bought the computer (new).
For example, I bought this computer December 2008, but this is one of the files clamwin found:
XL12CNV.EXE.infected 10/26/2006 INFECTED
XL12CNV.EXE.infected 10/2/2007 000 File
My guess is that these are really old files that are floating around the internet, that the bad guys haven't touched in a while. Someone please interpret for me. Can I delete files on my computer that clamwin identifies as infected, if they are older than the computer?
What is an 000 File anyway?
While in quarantine I scanned some of the files with clamwin and they didn't show as infected. What am I missing? The more I look the more I don't know!!
Thank you! Thank you!
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu May 21, 2009 5:27 pm |
|
 |
 |
 |
 |
Your files look okay to me--based on your information.
Here is a link to some information about those files at https://www.pc1news.com/files/97045-xl12cnv-exe.html on the web. I would upload one of them to Jotti at https://www.pc1news.com/videos/clean-your-pc-with-ccleaner-33.html on the web or VirusTotal at https://www.virustotal.com/ on the web. Either service will provide you with a free scan with multiple antiviruses, including Clam. If only a few AVs besides Clam find an infection (I like to see at least 5 AVs detect something), it's probably a false positive detection by Clam/ClamWin. Report false positives to Clam at https://www.clamav.net/sendvirus/ on the web. ClamWin has been a little "false positive" touchy since version .95.1 with Microsoft files.
I'm not sure what that 000 file is, but I wouldn't worry too much about those file dates, although sophisticated malware will sometimes change the date. Right click on the file and select Properties. Look at the General tab and check the created, modified and accessed dates for more information. See if anything there looks "funny." I'll bet everything looks okay. I've sometimes seen malware change the creation date but not the modified date--resulting in a modification date older than the creation date!
Regards,
|
|
 |
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
|  |