dr.crypto
Joined: 27 Sep 2017 |
Posts: 0 |
|
|
 |
Posted: Wed Sep 27, 2017 5:07 pm |
|
 |
 |
 |
 |
I ran the scan report and it says I have an infected file. How do I remove it?
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe: Win.Trojan.Agent-1387801 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 6303017
Engine version: 0.98.6
Scanned directories: 28689
Scanned files: 123022
Infected files: 1
Not copied: 1
Data scanned: 23474.73 MB
Data read: 32059.88 MB (ratio 0.73:1)
Time: 99977.045 sec (1666 m 17 s)
I would be most grateful for any assistance.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Sep 27, 2017 7:59 pm |
|
 |
 |
 |
 |
ClamWin has 3 options for detected files--report, remove, or quarantine. The default installation option is to report it to the user. You can change it toa ny one of the other two. I recommend that you never set it to remove--because a file might be falsely detected as infected (a false positive), and if you remove it, it is gone forever. You could lose an important file that way. I always set this option to quarantine--because you are able to restore a false positive with the Windows QRestore program found in the ClamWin\bin folder. ClamWin has protection against false positive detections for important system files that prevents them from being quarantined or removed.
If you have not changed this option after installation of ClamWin, it is still set at report. The file has not been touched--it is still in the folder location indicated in the ClamWin scan report. You should verify if the file is really infected by uploading it to Virus Total online at https://www.virustotal.com/#/home/upload on the web, where you can see what about 60 antiviruses say about the file--including the Clam AV scanner that is used by ClamWin. I like to see at least 2 of these AVs say a file is infected before I believe it: Avira, Bitdefender, Eset Nod32, Kaspersky, and Sophos. If Clam AV is the only Av reporting an infection (or if only a few other AVs also agree), the file is most likely a false positive det3ection and you should exclude it from future scanning by ClamWin--check the Help menu item for assistance with this. If the file is really infected, you can set the infected file option to Quarantine, rescan, and it will be placed in the ClamWin quarantine folder, where it will not do any harm. You can delete the file manually from quarantine by going to the quarantine folder.
Check the Help option for assistance with operating ClamWin. Let us know if you have any problems.
Thanks for using ClamWin!
Regards,
|
|
Admin010
Joined: 14 Mar 2018 |
Posts: 0 |
|
|
 |
Posted: Wed Mar 14, 2018 10:08 am |
|
 |
 |
 |
 |
thanks
|
|