Most are hash? Sure. They are auto generated. But there are still a good bit of more advanced signatures shipping every day
On Dec 4, 2016, 7:06 AM -0500, Al Varnell <alvarn...@mac.com>, wrote: On Dec 3, 2016, at 9:02 PM, crazy thinker wrote: Hi All, It is known that ClamAV uses Pattern Matching to Catch infected files. Not often. Most are checked against a hash value these days. In this case,Can We use Pattern Removal Statergy to repair infected files. For the most part, malware no longer modifies legitimate files, so repair is unnecessary. Deleting the entire file is generally the best course of action for today's malware. could anyone of you help me to get steps that follow for repairing infected files Not worth the effort for the very few files affected. For documents infected with macros, there are easier ways to ignore or remove them and the documents are not normally ones that are needed in any case. Sent from Janet's iPad -Al- _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml