How to delete an infected file?

How to delete an infected file?

In this example we are using EICAR.COM and F-Secure Internet Security 2007 (FSIS 2007) to demonstrate how to delete an infected file that is not cleaned automatically. The F-Secure Anti-Virus product that you are using may look a bit different. Nevertheless, you can still use the same general procedure to delete an infected file.

Warning! If the F-Secure antivirus product detects infected messages inside e-mail database files, do not select the Delete action nor any other disinfection action because you may accidentally delete all your e-mails. The e-mail databases can have extensions, such as .dbx, .pst, and .mbx (for Microsoft Outlook or Outlook Express e-mail clients), .msf and .snm (for Mozilla Thunderbird), or they can be named as INBOX, SENT or TRASH (for Netscape / Mozilla e-mail clients). For more information on how to disinfect mailboxes, see How to clean an infected mailbox.

1. On the FSIS 2007 main page, select first the Virus & Spy Protection page and then make sure that the protection level is either Normal or High:
   

   

2. The predefined settings for protection levels High and Normal define that if a virus or spyware is found, the antivirus product asks the user what action to take to clean the computer. This setting can be found under the Advanced settings:
   

   

3. In real-time scanning, the product scans the files as soon as they are accessed, executed or saved on the computer. If the product detects a virus, it will ask the user what to do with the infected file as follows:

   

   If the product detects a virus during manual scanning, it will ask the user what to do with the infected file as follows:

   

   Select the I want to decide item by item option and click Next. A list of the infected files is displayed:
   

   

4. Select first the item(s) that you want to delete from the list, click then Delete and finally Next.
   
   Note: If there are items in the list that you do not want to delete but, for example to disinfect instead, before clicking Next, select first the items to be disinfected, click then Disinfect and finally click Next. The items that you marked to be deleted are deleted and the ones that you marked to be disinfected are disinfected. An example of the final result is as follows:
   

   

5. Click Next and the following dialog is displayed:
   

   

   You have now completed the Disinfection Wizard and successfully deleted the infected file. If you want to view the Scanning Report, click Show Report. To end the Disinfection Wizard, click Finish.


6. If you changed any settings for the disinfection procedure, change the settings back to normal.