You are here

ClamWin: how do i handle a virus found

7 posts / 0 new
Last post
doozer
Offline
Last seen: 15 years 3 months ago
Joined: 2009-08-22 20:51
ClamWin: how do i handle a virus found

I installed clamwin on a thumb drive, then after i updated the definitions, I scanned the thumb drive. A virus was found. I just figured that clamwin did what it needed to do to correct the virus problem, I ran it again and the same virus was found again. So my question is, what should I do?

the report read like this:
G:\Msinfo.msi: Trojan. Gadgo.20 FOUND
Scan Summary
Known viruses: 611120
engine virsion: 0.95.2
infected files: 1

Thanks

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 7 months ago
Joined: 2006-06-18 13:55
First Do Nothing

Stop and think.
It is possible it is what is called a false positive.
Do not run the file at this point.

Do you know where you got the file from?
Is the file important to you? If so can you get a fresh copy?

Get a second opinion.
Up load the file to:
http://www.virustotal.com/en/indexx.html
and / or
http://virusscan.jotti.org/

They will run tests on the file by various antivirus products and tell you if other vendors are seeing a problem and help you decide what to do.

Now to answer question you did Not ask first,
ClamWin CAN NOT CLEAN a virus out of a file!!!

It has 3 settings, the Default is Report, which you have seen, the others are Quarantine, and Delete.
It can be set to Quarantine or Delete automatically, but since you appear to be dealing with only one file on your flash drive, G:\Msinfo.msi , you should just delete it yourself, manually [hit the delete key when the file is selected]

That is the best way to do it.

[Now to the question you Did ask, if you Really need to know how to make ClamWin Quarantine or Delete Automatically go to Tools->Preferences->General->Infected Files and choose Remove or Move to Quarantine Folder and click ok ]

Again, since ClamWin cannot clean the file itself it is best to just leave it in its default settings for future use, and just delete the file yourself.

Tim

Things have got to get better, they can't get worse, or can they?

thejdubb02
Offline
Last seen: 14 years 7 months ago
Joined: 2009-10-22 19:15
Hmmmm

I had the same problem and now that it was deleted the PortableApps auto run doesn't load anymore, because I get an error saying it cant find MsInfo.msi! I think this file is part of the new PortableApps auto loader... problem is that even after I have reinstalled the program it still doesn't work. Anyone have any ideas?

Chris Morgan
Chris Morgan's picture
Offline
Last seen: 9 years 5 months ago
Joined: 2007-04-15 21:08
That's not ours

We definitely don't do anything with an MSI package. That's due to something else - either some software or possibly malware.

I am a Christian and a developer and moderator here.

“A soft answer turns away wrath, but a harsh word stirs up anger.” – Proverbs 15:1

thejdubb02
Offline
Last seen: 14 years 7 months ago
Joined: 2009-10-22 19:15
The strange thing is that

The strange thing is that when I run the auto run i get the error I stated above, and even reinstalling it wont fix it. What should I do?

computerfreaker
computerfreaker's picture
Offline
Last seen: 13 years 2 months ago
Developer
Joined: 2009-08-11 11:24
Did you upload the file to

Did you upload the file to VirusTotal, by any chance? I'd like to see the results of that.

"The question I would like to know, is the Ultimate Question of Life, the Universe and Everything. All we know about it is that the Answer is Forty-two, which is a little aggravating."

ceciliaFX
ceciliaFX's picture
Offline
Last seen: 8 months 3 weeks ago
Joined: 2007-04-24 14:18
you can also try a search

"No one man can terrorize a whole nation unless we are all his accomplices." - Edward R. Murrow

Log in or register to post comments