[clamav-users] Question about Repairing infected files

[Joel Esler (jesler)]

Most are hash? Sure. They are auto generated. But there are still a good bit of more advanced signatures shipping every day


On Dec 4, 2016, 7:06 AM -0500, Al Varnell <alvarnell at mac.com>, wrote:
On Dec 3, 2016, at 9:02 PM, crazy thinker wrote:

Hi All,

It is known that ClamAV uses Pattern Matching to Catch infected files.

Not often. Most are checked against a hash value these days.

In
this case,Can We use Pattern Removal Statergy to repair infected files.

For the most part, malware no longer modifies legitimate files, so repair is unnecessary. Deleting the entire file is generally the best course of action for today's malware.

could anyone of you help me to get steps that follow for repairing
infected files

Not worth the effort for the very few files affected. For documents infected with macros, there are easier ways to ignore or remove them and the documents are not normally ones that are needed in any case.

Sent from Janet's iPad

-Al-
_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml