Information about the .vir (vir) file type

Below is all the information we have available on file about the .vir (vir) file type.

.vir
Quarantined virus file. The .vir file is a file which a (resident) anti-virus program has detected as a virus and has renamed (to .vir) to indicate that it is a virus.

The file may typically be located in a "quarantine" or "virus vault" folder, as some anti-virus packages also move an infected file file when a virus is detected. Files with viruses are renamed (to .vir) and possibly moved, both as measures to prevent the file from being run or opened.

It is believed that the following anti-virus packages can generate .vir files (this list may not be comprehensive):

  • Avira
  • Symantec
  • McAfee

Using the anti-virus package it should be possible to identify the virus contained in the file. It is normally possible to recover the original file, and the anti-virus package which generated/rename (and moved) the .vir file should be used to recover the original file - this may be desirable if you have good cause to think that the anti virus product is wrong in having detected a virus in the file. Be aware though, that .vir files should be considered as potentially very dangerous and treated as such.

Where this is available we would like to include file format information on .vir files, as well as information on how to view or open files of type .vir. If you know of any information which we have missed then please let us know.