So I understand clamscan only removes infected file from hard disk What happens if infection is in memory (RAM)?
On 2015-04-09 15:53, Dennis Peterson wrote: > On 4/9/15 7:31 AM, sanes wrote: > > Does "clamscan --remove=yes" only delete infected file from hard disk, or > > also if running in memory (RAM)? > > > > we rather manually delete files that are infected, but not sure how to > > handle > Having clamscan remove files before you review them is probably the worst > possible thing you can do with this product. If a false positive tags one of > your critical system files and deletes it you will have a difficult time > recovering. Same can happen with personal files. As good as ClamAV is you should > never give up control over your files to a tool that makes a best guess as to > what is and is not malware. > > dp > > http://www.clamav.net/contact.html#ml > > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
