It will never be detected. clamscan only scans files on media drives. -Al-
On Thu, Apr 09, 2015 at 01:09 PM, sanes wrote: > > So I understand clamscan only removes infected file from hard disk > > What happens if infection is in memory (RAM)? > On 2015-04-09 15:53, Dennis Peterson wrote: >> On 4/9/15 7:31 AM, sanes wrote: >>> Does "clamscan --remove=yes" only delete infected file from hard disk, >>> or >>> also if running in memory (RAM)? >>> >>> we rather manually delete files that are infected, but not sure how to >>> handle >> Having clamscan remove files before you review them is probably the worst >> possible thing you can do with this product. If a false positive tags one >> of >> your critical system files and deletes it you will have a difficult time >> recovering. Same can happen with personal files. As good as ClamAV is you >> should >> never give up control over your files to a tool that makes a best guess as >> to >> what is and is not malware. >> >> dp >> >> http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
