J.W. Michels wrote:
> After a recent virus scan (Clamwin) I discovered that several programs were
> no longer working properly.
> I need to know if these are "false positives"
The main ClamAV-users list is a better place to ask that.
http://www.clamav.net/support/ml
You'll want to post more than just the file list. You should dig up the
report indicating what was found in those files, or rescan them.
> ...and if they are how do I return them to their original file name
> and location?
> EXCEL.EXE.infected
> EXCEL.EXE.infected.000.infected
It appears the infected files are being renamed (they may have been
moved and/or permissions altered as well). As far as I know, that isn't
something the official win32 port of ClamAV does, so you are likely
using a third party port of ClamAV and/or some other tool that
incorporates ClamAV. The organization that produced the software ought
to be able to tell you how to reverse the quarantine process.
-Tom
--
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
> After a recent virus scan (Clamwin) I discovered that several programs were
> no longer working properly.
> I need to know if these are "false positives"
The main ClamAV-users list is a better place to ask that.
http://www.clamav.net/support/ml
You'll want to post more than just the file list. You should dig up the
report indicating what was found in those files, or rescan them.
> ...and if they are how do I return them to their original file name
> and location?
> EXCEL.EXE.infected
> EXCEL.EXE.infected.000.infected
It appears the infected files are being renamed (they may have been
moved and/or permissions altered as well). As far as I know, that isn't
something the official win32 port of ClamAV does, so you are likely
using a third party port of ClamAV and/or some other tool that
incorporates ClamAV. The organization that produced the software ought
to be able to tell you how to reverse the quarantine process.
-Tom
--
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32