deturn
Joined: 08 Mar 2015 |
Posts: 0 |
Location: USA |
|
 |
Posted: Sun Mar 08, 2015 3:01 am |
|
 |
 |
 |
 |
Hey, Forum. A question? What do you do with quarantined viruses? Thanks , Deturn
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Mar 08, 2015 4:35 am |
|
 |
 |
 |
 |
I check out quarantined files by going to the Virus Total online scanner and uploading them to the scanner to see what 57 other AVs say about the file. If it is not a virus, then it is a false positive detection, and I whitelist the file in ClamWin so it will not be detected again, and then I restore the file using the QRestore program in the ClamWin bin folder. The Clam AV team should get a copy of the file from Virus Total and correct their false signature within a couple of weeks, and you can remove the whitelisted item in ClamWin after that. I like to see at least 2 of these AVs verify a file is infected: Avira, Bitdefender, Nod32, Kaspersky, and Sophos. If the file is infected, you can then delete it from the quarantine folder or leave it in there. ClamWin gives it an "infected" extension, so it can not hurt anything.
Regards,
|
|
deturn
Joined: 08 Mar 2015 |
Posts: 0 |
Location: USA |
|
 |
Posted: Sun Mar 08, 2015 5:05 pm |
|
 |
 |
 |
 |
Thanks, GuitarBob. I'll try that, Deturn
|
|