ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Desinfection?
tramun


Joined: 06 Sep 2007
Posts: 0
Reply with quote
Hi dudes,
I've been using Clamwin antivirus for a short time but by the moment it works fine (I don't have virus cause my pc works well, I supose).

But, for the other hand, I would like to ask one thing that makes me worried a little bit... Can this antivirus disinfect??? I'm asking that because there is no option for desinfecting a virus if it is found in preferences menu, only Report, Remove and Move to Quarantine?

Can anyone answer my question?

Thx anyone who answers, and congratulations to the Clamwin team for their work and improvements on a free soft antivirus Smile
View user's profileSend private message
Re: Desinfection?
b0ne


Joined: 26 Oct 2006
Posts: 0
Reply with quote
tramun wrote:
Can this antivirus disinfect?


The term disinfection is sometimes mis-used in the anti-malware field. There are several types of viruses, to which this term most appropriately applies are the variety that infect legitimate files. This means your notepad.exe has a virus appended on to it. Some AVs treat "disinfection" the same as quarantining the file.

The standard definition of disinfecting a virus would be to locate the virus code inside the legitimate file and remove/alter the harmful code which allows the executable to function as it normally would.

Clamav, and by extension Clamwin, detect a minority of file infecting viruses, but do not have a mechanism to remove the viral code.

It is worth noting that in the instance that viral code is found it is usually safer and better to restore the original copy of the executable than attempting to repair it. Repairing is sometimes an error prone and difficult process than discovering the initial detection and does not always work for the AV's that implement true disinfection.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
bOne wrote:

"It is worth noting that in the instance that viral code is found it is usually safer and better to restore the original copy of the executable than attempting to repair it. Repairing is sometimes an error prone and difficult process than discovering the initial detection and does not always work for the AV's that implement true disinfection."

Repair increases the size/complexity of the code of antivirus software. That's one of the reasons for the bloated software produced by the large antivirus companies, and it's getting harder to do a really complete repair--because of today's multiple malware payloads.

Perhaps people/users will be more careful if they have to clean up the mess for which they are often responsible in the first place!

Regards,
View user's profileSend private message
Desinfection?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic