healing file instead removing

Discussion in 'other anti-virus software' started by TeflonShield, Jan 13, 2011.

Thread Status:
Not open for further replies.
  1. TeflonShield

    TeflonShield Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    40
    hi

    is it possibale that a file,componet,software etc....

    could be healed instead just deleting the whole file?

    so the file can be used
     
  2. 3GUSER

    3GUSER Registered Member

    Joined:
    Jan 10, 2010
    Posts:
    812
    Yes , it is possible but only if it has been infected by a classical virus (file infector) and only if the antivirus engine can do it. Trojans , spyware , etc (non-viral malicious software) are only deleted as they are by themselve malicious.
     
  3. TeflonShield

    TeflonShield Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    40
    so th infection is actually adding malicious code to a file or attaching malicious file to it?
     
  4. Nevis

    Nevis Registered Member

    Joined:
    Aug 28, 2010
    Posts:
    786
    Location:
    255.255.255.255
    yes, thats why you have quarantine

    though as per ur question , its not necessary that after you could use that s/w as the might be BINded with it
     
  5. 3GUSER

    3GUSER Registered Member

    Joined:
    Jan 10, 2010
    Posts:
    812
    Yes , it adds code. Sometimes the original file gets corrupted (due to virus bug or due to the virus itself) so that it cannot be repaired/cleaned/healed and must be deleted or replaced from a back-up= the original/initial file(s)
     
  6. TeflonShield

    TeflonShield Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    40
    thanks for the info guys
     
  7. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    In some cases the recovery of an infected file is not completely identical to the original file.
    Dr.Web is the case, when performing the disinfection, mitigates patching the files, instead of getting a file identical to the original, causing other AV-scanners detect these code-modifications as Trj/Patched.Gen or similar.
    I prefer an AV deletes the file, instead of getting a mitigation to the problem.

    So it is advisable to always have a copy of your files, do not forget.
     
    Last edited: Jan 13, 2011
Loading...
Thread Status:
Not open for further replies.