ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
infected files not moved to quarantine
stdnt4vr


Joined: 27 Sep 2010
Posts: 0
Reply with quote
Hello. I recently completed a virus scan. The scan found many infected files but none of them were moved to the quarantine folder so a repeat scan just shows the same results. Yes, the 'move to quarantine' option is selected in the Preferences tab. And it has successfully moved files there in the past but not lately. Is it at all possible that the quarantine folder is full and needs to be cleared/deleted? Not sure how to do this function. Any help is greatly appreciated. Thx!
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 0
Location: **UNKNOWN**
Reply with quote
You can manage the quarantine with a file called "QRecovery" located in your ClamWin install directory.

I am not aware of any limits that Alch or the ClamAV team has put on the quarantine folder, however, I do know sometimes ClamWin detects a file and says it quarantines it, but never actually does. You can notice this very well with Clam Sentinel, too.
View user's profileSend private message
stdnt4vr


Joined: 27 Sep 2010
Posts: 0
Reply with quote
Thank you for the prompt reply. I did find the QRecovery file though I'm not clear how I would delete the files inside if I was interested. It seems the only options are 'select' and 'restore all'.

Clamwin is definitely not quarantining those files nor is it saying it is doing so. So if you or your team come up with any thoughts/explanations/solutions about that, please let me know.

I am not familiar with Clam Sentinel. Could you please give me some details? Is that an addendum/supplemental program?
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 0
Location: **UNKNOWN**
Reply with quote
Clam Sentinel is an add-on for ClamWin that adds a real-time scanner and basic heuristics (currently GuitarBob and I are looking on improving the heuristics). You can view the homepage here: https://clamsentinel.sourceforge.net/

As for deleting items in the quarantine, you can do it manually by going to C:/Users/Username/AppData/roaming/.clamwin/quarantine.

I have requested, in the past, for Alch to be able to delete files using QRecovery and a way to navigate to it through the GUI, but it has not happened, yet.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
The Quarantine access program used by Clam Sentinel is very good--much better than Clam Win's version, and it has functions not available in CamWin's version.

Regards.
View user's profileSend private message
stdnt4vr


Joined: 27 Sep 2010
Posts: 0
Reply with quote
Thanks again for the info. I will definitely give Clam Sentinel a try as ClamWin is still not moving the infected files to quarantine.

Also, that path you suggested to manually delete quarantined files does not work as I do not have all those folders on my computer.

Finally, I am noticing there are now an enormous number of files that ClamWin cannot access during a scan that say "permission denied" if you have any thoughts about that.
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 0
Location: **UNKNOWN**
Reply with quote
The permission denied files are nothing to worry about. Those are usually system files that cannot by access by the scanner. All AVs have this, but most don't tell about it.

If you cant see the folders, then you should go to control panel/Folder options and under the View tab make sure you have "To show all hidden folders" You should be able to see all the folders now.

One more thing about Sentinel, you need to have ClamWin installed as they work together.
View user's profileSend private message
infected files not moved to quarantine
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic