When to CLEAN vs when to DELETE a virus? 4

[garymgordon]

I simply want to know the difference .. between the option of CLEAN or DELETE .. when a virus is present.

I have McAfee.

It asks do I want to clean or delete the file infected.

Can someone explain the difference and tell me ... if it is cleanable .. is that the better choice? Or should I always delete an infected file? Which is the better choice?

And, if I clean it .. what exactly is McAfee doing .. when it CLEANS the file? Is the file (after it is cleaned) .. now considered still a "good" file? Will it operate normally now .. after being cleaned? What exactly does McAfee do when it "CLEANS" an infected file?

I would love it if someone could tell me what this all means.

Thanks,
Gary


Gary M. Gordon, LLC
webmaster@garymgordon.com
Certified Web Developer ::
Application Programmer

http://www.garymgordon.com/

 

[carrr]

I believe that the clean option (I don't use McAfee anymore, so...) lets McAfee try and disinfect the file without deleting it. If successful, you get to keep the file. If unable to clean it, McAfee will delete it.

 

[edfair]

Viral code in embedded in executable files to do malicious things in addition to what the file is supposed to do. Basic method is to add the code to the end of the existing code and change the entry point to start the program at the virus code which processes the bad stuff than goes to the original starting point to do the original stuff.
Cleaning involves changing the entry point and removing the virii code.
Cleaning should result in a file that contains the same code as the original and should work the same as the original.
Cleaning is probably a better choice for you since you won't have to reload from your original source.
But some get corrupted in such a way that the AV software can't fix it and they need to be deleted , then reloaded.

Ed Fair
Any advice I give is my best judgement based on my interpretation of the facts you supply. Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[garymgordon]

Thank you!!


Gary M. Gordon, LLC
webmaster@garymgordon.com
Certified Web Developer ::
Application Programmer

http://www.garymgordon.com/

 

[wmccall]

Gary,

To decide which is better (clean vs delete) you need to look at what the file is.

If it is a file than came in an email, the answer should be delete it! Make the sender provide a clean one if it is somethign you need. However, if a coworker sent you an important document (and you know that is what it is) and it is time sensitive, it may be worth cleaning. Personally, I would say delete it anyway and put the burdon on them to clean it.

About the only time I use clean, is if I am working on a system that is infected and I am trying to make it work again. But I look for where the file is as a clue to what program it belongs to in case I might need to reinstall it later.

 

[garymgordon]

Thanks for your comment

Gary M. Gordon, LLC
webmaster@garymgordon.com
Certified Web Developer ::
Application Programmer

http://www.garymgordon.com/