Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Jihyun-Chang
check man pages. ~ChanG~ -Original Message- From: "Lyle Giese"<l...@lcrcomputer.net> To: <clamav-users@lists.clamav.net>; Cc: Sent: 2015-02-03 (화) 08:52:27 Subject: Re: [clamav-users] I have some queries about ClamAV ChanG I think maybe you mis-understand the

Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Jihyun-Chang
Dear Al, Thank you I'll check it. ~ChanG~ -Original Message- From: "Al Varnell"<alvarn...@mac.com> To: "ClamAV users ML"<clamav-users@lists.clamav.net>; Cc: Sent: 2015-02-03 (화) 08:46:51 Subject: Re: [clamav-users] I have some queries about Cla

Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Lyle Giese
s@lists.clamav.net>; Cc: Sent: 2015-02-03 (화) 01:13:05 Subject: Re: [clamav-users] I have some queries about ClamAV 1. I found the documentation on --move and --remove options in the man pages for clamscan and clamdscan. 2.--move=DIRECTORY Move infected files into DIRECTORY.

Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Al Varnell
ot;<smor...@sourcefire.com> > To: "ClamAV users ML"<clamav-users@lists.clamav.net>; > Cc: > Sent: 2015-02-03 (화) 01:13:05 > Subject: Re: [clamav-users] I have some queries about ClamAV > > 1. I found the documentation on --move and --remove options in the m

Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Jihyun-Chang
.com> To: "ClamAV users ML"<clamav-users@lists.clamav.net>; Cc: Sent: 2015-02-03 (화) 01:13:05 Subject: Re: [clamav-users] I have some queries about ClamAV 1. I found the documentation on --move and --remove options in the man pages for clamscan and clamdscan. 2.--move=DIRECT

Re: [clamav-users] I have some queries about ClamAV

2015-02-02 Thread Steven Morgan
1. I found the documentation on --move and --remove options in the man pages for clamscan and clamdscan. 2.--move=DIRECTORY Move infected files into DIRECTORY. However, as the man pages and Dennis point out, use of these is probably not a good idea. Steve On Mon, Feb 2, 2015 at 10

[clamav-users] I have some queries about ClamAV

2015-02-02 Thread Jihyun-Chang
Dear ClamAV users, Hi~ I am a student interested in security. I have a few questions about ClamAV. I already understand that ClamAV can have the ability to quarantine an infected file if it finds one. So, I want to know, 1. I cannot find this ability (ability to quarantine) in user menual. cou

Re: [clamav-users] I have some queries about ClamAV

2015-01-28 Thread Dennis Peterson
To be honest that is an option that should probably not exist as it is especially dangerous owing to lack of intelligence in the decision process coupled with the opportunity for false positives (barely hinted at in the clamdscan --help screen). Given the real possibility of crippling a system i

Re: [clamav-users] I have some queries about ClamAV

2015-01-28 Thread Steven Morgan
clamscan and clamd options exist to remove or move (--move --remove) infected files. The documentation indicates use with care. I've not tried them myself. Steve On Tue, Jan 27, 2015 at 7:40 PM, Dennis Peterson wrote: > He wants to know if ClamAV takes any corrective action such as quarantine >

Re: [clamav-users] I have some queries about ClamAV

2015-01-27 Thread Dennis Peterson
He wants to know if ClamAV takes any corrective action such as quarantine or even remediate the problem by replacing corrupted files with originals. ClamAV does neither, but it can alert tertiary software to perform quarantining and provide notification of a need for user initiated remediation.

Re: [clamav-users] I have some queries about ClamAV

2015-01-27 Thread Joel Esler (jesler)
I believe I emailed this privately to you. ClamAV can have the ability to quarantine an infected file if it finds one. We don’t know what you mean by the word “cure”. Can you elaborate what you mean there for the group? -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos O