[clamav-users] ransomware

[G.W. Haywood]

Hi there,

On Wed, 30 Sep 2020, Mat via clamav-users wrote:

> Does clamav support remove ransomware?

No.

It does have options to remove or move files which it considers to be
'infected' but you would need to be sure that you understand the risks
of doing something like that before doing it automatically.  I can't
imagine any circumstances under which I would recommend it, not least
because some methods used by ClamAV to look for suspicious files are
prone to accidental 'false positives'.  These can and do happen when a
signature is added to a database, at any time, without warning, and
could easily identify an essential system file falsely as malicious.
If you look in the archives for this list you will find examples.

-- 

73,
Ged.