[clamav-win32] How do I return these files to their original names and folders

Tom Metro tmetro+clamwin32 at gmail.com
Fri May 1 22:58:23 CEST 2009


J.W. Michels wrote:
> After a recent virus scan (Clamwin) I discovered that several programs were
> no longer working properly. 
> I need to know if these are "false positives" 

The main ClamAV-users list is a better place to ask that.

http://www.clamav.net/support/ml

You'll want to post more than just the file list. You should dig up the 
report indicating what was found in those files, or rescan them.


> ...and if they are how do I return them to their original file name
> and location?
> EXCEL.EXE.infected
> EXCEL.EXE.infected.000.infected

It appears the infected files are being renamed (they may have been 
moved and/or permissions altered as well). As far as I know, that isn't 
something the official win32 port of ClamAV does, so you are likely 
using a third party port of ClamAV and/or some other tool that 
incorporates ClamAV. The organization that produced the software ought 
to be able to tell you how to reverse the quarantine process.

  -Tom

-- 
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/


More information about the clamav-win32 mailing list