[clamav-users] How to manually delete infected file

[Al Varnell]

It will never be detected. clamscan only scans files on media drives.

-Al-

On Thu, Apr 09, 2015 at 01:09 PM, sanes wrote:
> 
> So I understand clamscan only removes infected file from hard disk
> 
> What happens if infection is in memory (RAM)?

> On 2015-04-09 15:53, Dennis Peterson wrote: 
>> On 4/9/15 7:31 AM, sanes wrote: 
>>> Does "clamscan --remove=yes" only delete infected file from hard disk,
>>> or 
>>> also if running in memory (RAM)? 
>>> 
>>> we rather manually delete files that are infected, but not sure how to 
>>> handle 

>> Having clamscan remove files before you review them is probably the worst 
>> possible thing you can do with this product. If a false positive tags one
>> of 
>> your critical system files and deletes it you will have a difficult time 
>> recovering. Same can happen with personal files. As good as ClamAV is you
>> should 
>> never give up control over your files to a tool that makes a best guess as
>> to 
>> what is and is not malware. 
>> 
>> dp 
>> 
>> http://www.clamav.net/contact.html#ml