Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Understanding the "Actions" that VirusScan can take upon infected file

Status
Not open for further replies.

Windexx

Technical User
Dec 18, 2003
72
US
The below was sent in the weekly newsletter and is also in NAI's KB37414. In short, if you don't select "Clean infected files automatically" as a primary action, the clean-up routines won't go. In many cases this would be okay as long as the signature recognized the virus prior to being installed. If not, then you delete the virus file that the signature has and leave all the other crud. Am I the only one that didn't know this?

--------------------------------------

Only the "Clean infected files automatically" action Invokes the clean-up routines of a detected file.

The information on how to clean up an infection or other detection is stored in the DAT files, updated and released by AVERT. Clean-up may include modifying files and removing registry entries.


Solution 2:
"Delete infected files automatically" and "Move infected files to a folder" does not do any clean-up of a detection. These simply delete or move what was detected.

McAfee strongly recommends that the primary action should always be "Clean infected files automatically", which is the default setting.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top