|
Theoracle117
| Joined: 18 Sep 2008 |
| Posts: 0 |
| Location: san diego |
|
|
 Posted: Tue Sep 30, 2008 2:16 am |
|
 |
 |
|
|
Wouldn't it be better to ad the .infected or whatever at the ENd of the file, so that it will change its file type and it wouldn't be able to open?
|
|
|
|
sherpya
| Joined: 22 Mar 2006 |
| Posts: 0 |
| Location: Italy |
|
|
| Posted: Tue Sep 30, 2008 11:59 am |
|
|
|
|
|
clamwin altready adds infected as prefix (for bad named files), renaming the extension is a good idea, I'll think about it
|
|
|
|
Antonio S.
| Joined: 20 Apr 2008 |
| Posts: 0 |
| Location: Italy |
|
|
| Posted: Tue Sep 30, 2008 12:03 pm |
|
|
|
|
|
Could be an idea, but how to handle files which are detected as false positives at a deeper check?
Should think about a way to restore the original extention...
Regards,
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Tue Sep 30, 2008 2:49 pm |
|
|
|
|
|
I second Antonio, guys. How about keeping the regular extension and adding another extension after it that could be dropped when you restore a false positive?
Regards,
|
|
|
