[clamav-users] How to manually delete infected file

sanes zds at wrzanes.com
Thu Apr 9 20:09:38 UTC 2015


So I understand clamscan only removes infected file from hard disk

What happens if infection is in memory (RAM)?

 

On 2015-04-09 15:53, Dennis Peterson wrote: 
> On 4/9/15 7:31 AM, sanes wrote: 
> > Does "clamscan --remove=yes" only delete infected file from hard disk,
or 
> > also if running in memory (RAM)? 
> > 
> > we rather manually delete files that are infected, but not sure how to 
> > handle 
> Having clamscan remove files before you review them is probably the worst 
> possible thing you can do with this product. If a false positive tags one
of 
> your critical system files and deletes it you will have a difficult time 
> recovering. Same can happen with personal files. As good as ClamAV is you
should 
> never give up control over your files to a tool that makes a best guess as
to 
> what is and is not malware. 
> 
> dp 
> 
> http://www.clamav.net/contact.html#ml 
> 
> 




More information about the clamav-users mailing list