ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
quarantined adware
leatha52


Joined: 07 May 2009
Posts: 0
Reply with quote
Clamwin quarantined adware infected files. These files were system files such as web search rundll et. What do I do these files are needed? Thank you
View user's profileSend private message
Antonio S.


Joined: 20 Apr 2008
Posts: 0
Location: Italy
Reply with quote
Hello,
If you are sure the files are safe (if not, submit them to www.virustotal,.com and check what comes out; maybe it's a false positive case) you can navigate to Clamwin's quarantine folder and copy back the file to their original position. You will have to remove the infected. prefix from filename to make them work as usual.
If files are safe notify Clam about false positive using the form @ cgi.clamav.net/sendvirus.cgi. so they can fix the issue in a few days.
In the meantime you can set Clamwin Preferences to report only option so files won't be moved to Quarantine once scan is relaunched (I guess this is the best option to avoid problems; more or less all av's catch false positives and I personally prefer just to be notified when a scan is finding something than letting it just move the file automatically).

Regards,
Antonio
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
You can temporarily exclude a file from ClamWin scans via Configuration, Filters--IF you are sure it is a false positive. Configure it like C:\directoryname\subdirectoryname\filename.extension. Be sure to upload the file to Clam, however, so the false positive will be corrected. Give it 4/5 days and delete it and then scan it with ClamWin to see if the correction has been made--restore it if not. False positive corrections are usually made within a couple of days.

Regards,
View user's profileSend private message
quarantined adware
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic