CorazonJedi Posted December 20, 2021 Report Share Posted December 20, 2021 Hi, second day using Immunet, and today I got an alert of detection, with the "Event Type" stating "Quarantine Failed". More details in the file enclosed. I followed the address, couldn't find the file. How do I proceed? Quote Link to comment Share on other sites More sharing options...
ritchie58 Posted December 21, 2021 Report Share Posted December 21, 2021 There are times when a quarantine response will fail if it's just a Windows temp file that no longer exists after you closed the app that made it. If you keep getting this same detection, and you're sure it is a False Positive, you could try to use the Restore feature for that file. Once restored Immunet will automatically put the file path in the Exclusion list & will no longer be scanned. Just click on the file listing located in the History files & choose the 'Restore' feature. If you run into difficulties using auto restore for the file you can create a custom Exclusion rule by manually typing in the 'exact' file path. Just be careful not to get any typographical errors to the file path. Click on Settings -> click on Add New Exclusion -> type in the file path to the little blank dialog window -> click on Add Exclusion. Since this is a detection by the ClamAV module you could also report this as a False Positive directly to the ClamAV development team here. http://www.clamav.net/contact Best wishes, Ritchie... 1 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.