Re: [clamav-users] I have some queries about ClamAV

[Jihyun-Chang]

Dear Lyle Giese,
Thanks for pointing out this.  
As far as I know one of the purpose of ClamAV is file (Executable, Compressed, 
including email file) scanning . 
So, I am going to use clamAV on my embedded system. but I need to study clamAV 
manual. 
according to clamav-users comment, I'll check man pages.
~ChanG~
-Original Message-
From: "Lyle Giese"<l...@lcrcomputer.net> 
To: <clamav-users@lists.clamav.net>; 
Cc: 
Sent: 2015-02-03 (화) 08:52:27
Subject: Re: [clamav-users] I have some queries about ClamAV
 
ChanG
I think maybe you mis-understand the purpose of ClamAV.  Look at ClamAV 
as a program to scan email and files.  Nothing more really.

To do more, you would need a wrapper program of some sort or an email 
program that uses ClamAV to scan new email.  The 'wrapper' or email 
program uses the status output of ClamAV to make decisions on what to do 
with the file/email passed to ClamAV.

This is the primary use of ClamAV on real world systems.

Lyle Giese
LCR Computer Services, Inc.

On 02/02/15 17:37, Jihyun-Chang wrote:
> Hi Steven,
> Thank you for your feedback.
> I have only clamdoc.pdf (downloaded in clamav website) this documentation 
don't have this options :(
> Can I get the documentation as you mentioned ?
>   
> Thanks
> ~ChanG~
>   
> -Original Message-
> From: "Steven Morgan"<smor...@sourcefire.com>
> To: "ClamAV users ML"<clamav-users@lists.clamav.net>;
> Cc:
> Sent: 2015-02-03 (화) 01:13:05
> Subject: Re: [clamav-users] I have some queries about ClamAV
>   
> 1. I found the documentation on --move and --remove options in the man
> pages for clamscan and clamdscan.
>
> 2.--move=DIRECTORY
>Move infected files into DIRECTORY.
>
> However, as the man pages and Dennis point out, use of these is probably
> not a good idea.
>
> Steve
>
> On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang 
<jhyun_ch...@naver.com> wrote:
>
> > Dear ClamAV users,
> > Hi~ I am a student interested in security.
> > I have a few questions about ClamAV. I already understand that ClamAV 
can
> > have the ability to quarantine an infected file if it finds one.
> >
> > So, I want to know,
> > 1. I cannot find this ability (ability to quarantine) in user menual.
> > could anyone let me know where it is ?
> > 2. where is the infected files move to? and next ? user should be 
fixed(or
> > removed) the infected files ?
> >
> > I look forward to ClamAV user's response.
> > Best Regards.
> >
> > ~Chang~
> >
> >
> >
> >
> > ___
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> >
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Jihyun-Chang]

Dear Al,
Thank you I'll check it. 
 
~ChanG~
 
-Original Message-
From: "Al Varnell"<alvarn...@mac.com> 
To: "ClamAV users ML"<clamav-users@lists.clamav.net>; 
Cc: 
Sent: 2015-02-03 (화) 08:46:51
Subject: Re: [clamav-users] I have some queries about ClamAV
 
You also have all the man files.

In the source they can be found in /docs/man/ as clamscan.1 and clamdscan.1

or if clamAV is in your path type use the command line “man clamscan” or “man 
clamdscan”.

-Al-

On Mon, Feb 02, 2015 at 03:37PM, Jihyun-Chang wrote:
> 
> Hi Steven, 
> Thank you for your feedback. 
> I have only clamdoc.pdf (downloaded in clamav website) this documentation 
don't have this options :(
> Can I get the documentation as you mentioned ?
> 
> Thanks 
> ~ChanG~
> 
> -Original Message-
> From: "Steven Morgan"<smor...@sourcefire.com> 
> To: "ClamAV users ML"<clamav-users@lists.clamav.net>; 
> Cc: 
> Sent: 2015-02-03 (화) 01:13:05
> Subject: Re: [clamav-users] I have some queries about ClamAV
> 
> 1. I found the documentation on --move and --remove options in the man
> pages for clamscan and clamdscan.
> 
> 2.--move=DIRECTORY
>  Move infected files into DIRECTORY.
> 
> However, as the man pages and Dennis point out, use of these is probably
> not a good idea.
> 
> Steve
> 
> On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang 
<jhyun_ch...@naver.com> wrote:
> 
> > Dear ClamAV users,
> > Hi~ I am a student interested in security.
> > I have a few questions about ClamAV. I already understand that ClamAV 
can
> > have the ability to quarantine an infected file if it finds one.
> >
> > So, I want to know,
> > 1. I cannot find this ability (ability to quarantine) in user menual.
> > could anyone let me know where it is ?
> > 2. where is the infected files move to? and next ? user should be 
fixed(or
> > removed) the infected files ?
> >
> > I look forward to ClamAV user's response.
> > Best Regards.
> >
> > ~Chang~



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Lyle Giese]

ChanG
I think maybe you mis-understand the purpose of ClamAV.  Look at ClamAV 
as a program to scan email and files.  Nothing more really.


To do more, you would need a wrapper program of some sort or an email 
program that uses ClamAV to scan new email.  The 'wrapper' or email 
program uses the status output of ClamAV to make decisions on what to do 
with the file/email passed to ClamAV.


This is the primary use of ClamAV on real world systems.

Lyle Giese
LCR Computer Services, Inc.

On 02/02/15 17:37, Jihyun-Chang wrote:

Hi Steven,
Thank you for your feedback.
I have only clamdoc.pdf (downloaded in clamav website) this documentation don't 
have this options :(
Can I get the documentation as you mentioned ?
  
Thanks

~ChanG~
  
-Original Message-

From: "Steven Morgan"<smor...@sourcefire.com>
To: "ClamAV users ML"<clamav-users@lists.clamav.net>;
Cc:
Sent: 2015-02-03 (화) 01:13:05
Subject: Re: [clamav-users] I have some queries about ClamAV
  
1. I found the documentation on --move and --remove options in the man

pages for clamscan and clamdscan.

2.--move=DIRECTORY
   Move infected files into DIRECTORY.

However, as the man pages and Dennis point out, use of these is probably
not a good idea.

Steve

On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang <jhyun_ch...@naver.com> 
wrote:

> Dear ClamAV users,
> Hi~ I am a student interested in security.
> I have a few questions about ClamAV. I already understand that ClamAV can
> have the ability to quarantine an infected file if it finds one.
>
> So, I want to know,
> 1. I cannot find this ability (ability to quarantine) in user menual.
> could anyone let me know where it is ?
> 2. where is the infected files move to? and next ? user should be fixed(or
> removed) the infected files ?
>
> I look forward to ClamAV user's response.
> Best Regards.
>
> ~Chang~
>
>
>
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Al Varnell]

You also have all the man files.

In the source they can be found in /docs/man/ as clamscan.1 and clamdscan.1

or if clamAV is in your path type use the command line “man clamscan” or “man 
clamdscan”.

-Al-

On Mon, Feb 02, 2015 at 03:37PM, Jihyun-Chang wrote:
> 
> Hi Steven, 
> Thank you for your feedback. 
> I have only clamdoc.pdf (downloaded in clamav website) this documentation 
> don't have this options :(
> Can I get the documentation as you mentioned ?
> 
> Thanks 
> ~ChanG~
> 
> -Original Message-
> From: "Steven Morgan"<smor...@sourcefire.com> 
> To: "ClamAV users ML"<clamav-users@lists.clamav.net>; 
> Cc: 
> Sent: 2015-02-03 (화) 01:13:05
> Subject: Re: [clamav-users] I have some queries about ClamAV
> 
> 1. I found the documentation on --move and --remove options in the man
> pages for clamscan and clamdscan.
> 
> 2.--move=DIRECTORY
>  Move infected files into DIRECTORY.
> 
> However, as the man pages and Dennis point out, use of these is probably
> not a good idea.
> 
> Steve
> 
> On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang <jhyun_ch...@naver.com> 
> wrote:
> 
> > Dear ClamAV users,
> > Hi~ I am a student interested in security.
> > I have a few questions about ClamAV. I already understand that ClamAV can
> > have the ability to quarantine an infected file if it finds one.
> >
> > So, I want to know,
> > 1. I cannot find this ability (ability to quarantine) in user menual.
> > could anyone let me know where it is ?
> > 2. where is the infected files move to? and next ? user should be 
> fixed(or
> > removed) the infected files ?
> >
> > I look forward to ClamAV user's response.
> > Best Regards.
> >
> > ~Chang~



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Jihyun-Chang]

Hi Steven, 
Thank you for your feedback. 
I have only clamdoc.pdf (downloaded in clamav website) this documentation don't 
have this options :(
Can I get the documentation as you mentioned ?
 
Thanks 
~ChanG~
 
-Original Message-
From: "Steven Morgan"<smor...@sourcefire.com> 
To: "ClamAV users ML"<clamav-users@lists.clamav.net>; 
Cc: 
Sent: 2015-02-03 (화) 01:13:05
Subject: Re: [clamav-users] I have some queries about ClamAV
 
1. I found the documentation on --move and --remove options in the man
pages for clamscan and clamdscan.

2.--move=DIRECTORY
  Move infected files into DIRECTORY.

However, as the man pages and Dennis point out, use of these is probably
not a good idea.

Steve

On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang <jhyun_ch...@naver.com> 
wrote:

> Dear ClamAV users,
> Hi~ I am a student interested in security.
> I have a few questions about ClamAV. I already understand that ClamAV can
> have the ability to quarantine an infected file if it finds one.
>
> So, I want to know,
> 1. I cannot find this ability (ability to quarantine) in user menual.
> could anyone let me know where it is ?
> 2. where is the infected files move to? and next ? user should be fixed(or
> removed) the infected files ?
>
> I look forward to ClamAV user's response.
> Best Regards.
>
> ~Chang~
>
>
>
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Steven Morgan]

1. I found the documentation on --move and --remove options in the man
pages for clamscan and clamdscan.

2.--move=DIRECTORY
  Move infected files into DIRECTORY.

However, as the man pages and Dennis point out, use of these is probably
not a good idea.

Steve

On Mon, Feb 2, 2015 at 10:21 AM, Jihyun-Chang  wrote:

> Dear ClamAV users,
> Hi~ I am a student interested in security.
> I have a few questions about ClamAV. I already understand that ClamAV can
> have the ability to quarantine an infected file if it finds one.
>
> So, I want to know,
> 1. I cannot find this ability (ability to quarantine) in user menual.
> could anyone let me know where it is ?
> 2. where is the infected files move to? and next ? user should be fixed(or
> removed) the infected files ?
>
> I look forward to ClamAV user's response.
> Best Regards.
>
> ~Chang~
>
>
>
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] I have some queries about ClamAV

[Jihyun-Chang]

Dear ClamAV users,
Hi~ I am a student interested in security.
I have a few questions about ClamAV. I already understand that ClamAV can have 
the ability to quarantine an infected file if it finds one.
  
So, I want to know, 
1. I cannot find this ability (ability to quarantine) in user menual. could 
anyone let me know where it is ?
2. where is the infected files move to? and next ? user should be fixed(or 
removed) the infected files ?
  
I look forward to ClamAV user's response.
Best Regards.
 
~Chang~




___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Dennis Peterson]

To be honest that is an option that should probably not exist as it is 
especially dangerous owing to lack of intelligence in the decision process 
coupled with the opportunity for false positives (barely hinted at in the 
clamdscan --help screen). Given the real possibility of crippling a system it 
isn't a feature I would suggest is a "cure" offered by the software, and it 
requires substantial knowledge of the risks involved and best practices to 
offset some of that risk. If a person were to try this in a corporate 
environment I would strongly recommend doing so without any third-party or 
self-generated signatures installed for no other reason than to minimize the 
number of people who have to show up in court during the lawsuit that follows. :)


dp

On 1/28/15 7:47 AM, Steven Morgan wrote:

clamscan and clamd options exist to remove or move (--move --remove)
infected files. The documentation indicates use with care. I've not tried
them myself.

Steve

On Tue, Jan 27, 2015 at 7:40 PM, Dennis Peterson 
wrote:


He wants to know if ClamAV takes any corrective action such as quarantine
or even remediate the problem by replacing corrupted files with originals.
ClamAV does neither, but it can alert tertiary software to perform
quarantining and provide notification of a need for user initiated
remediation.

One can conjecture the wisdom of auto-remediation by an AV product, but
some of the worst botch jobs I've ever worked with were done by
well-meaning AV products that got fix-up wrong.

dp


On 1/27/15 4:13 PM, Joel Esler (jesler) wrote:


I believe I emailed this privately to you.  ClamAV can have the ability
to quarantine an infected file if it finds one.

We don’t know what you mean by the word “cure”.  Can you elaborate what
you mean there for the group?

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos


On Jan 27, 2015, at 7:10 PM, Jihyun-Chang > wrote:


Is there no one to answer me ?

===

Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while
looking through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means
ClamAV can fix the scanned files) or just virus-scanner ? (It means ClamAV
cannot support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.
html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~


-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: "Joel Esler (jesler)"mailto:jes...@cisco.com>>;
Cc: "clamav-devel-ow...@lists.clamav.net"mailto:clamav-devel-ow...@lists.clamav.net>>; "clamav-users-owner@lists.
clamav.net"<
clamav-users-ow...@lists.clamav.net>;
Sent: 2015-01-27 (화) 11:29:01
Subject: Re: I have some queries about ClamAV


I wrote the user list already but nobody answer my questuon for two
weeks. I don't know why it is taking so long. Even though my question is
not difficult.

thanks. Best regards.

-Original Message-
From: "Joel Esler (jesler)" mailto:jes...@cisco.com>>
To: Jihyun-Chang mailto:jhyun_ch...@naver.com>>
Cc: "clamav-devel-ow...@lists.clamav.net" mailto:clamav-devel-ow...@lists.clamav.net>>
Sent: 2015. 1. 27. 오전 11:20:20
Subject: Re: I have some queries about ClamAV

You are writing the development list.  You should be writing the users
list unless you are contributing development code.

--
Joel Esler
Sent from my iPhone

On Jan 26, 2015, at 9:07 PM, Jihyun-Chang > wrote:


can you hear me ?

I'm waiting answer from ClamAV team long time ago..



-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: mailto:clamav-de...@lists.clamav.net

;

Cc:
Sent: 2015-01-22 (목) 17:19:18
Subject: I have some queries about ClamAV




Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while
looking through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means
ClamAV can fix the scanned files) or just virus-scanner ? (It means ClamAV
cannot support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.
html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~



[http://mail.naver.com/readReceipt/notify/?img=FmFjWNkl1zcYar%
2B5M6CoMrU9KziCFAb9MxMdFxkoF4UXpxk4Frp0Kqu%2FKxF4MdIo%
2BrkSKxt5W4d5W4C5bX0q%2BzkR74FTWx%2FsMrwCW6Jr7630%
2B4kn76eXW4kZtzwGbX3q74FnM69C%2BSl5pBt5.gif]
[http://mail.naver.com/readReceipt/notify/?img=FY%2BjWNkl1zcYar%
2B5M6CoKxUwpxbXFxMXM43SKx0vM6F

Re: [clamav-users] I have some queries about ClamAV

[Steven Morgan]

clamscan and clamd options exist to remove or move (--move --remove)
infected files. The documentation indicates use with care. I've not tried
them myself.

Steve

On Tue, Jan 27, 2015 at 7:40 PM, Dennis Peterson 
wrote:

> He wants to know if ClamAV takes any corrective action such as quarantine
> or even remediate the problem by replacing corrupted files with originals.
> ClamAV does neither, but it can alert tertiary software to perform
> quarantining and provide notification of a need for user initiated
> remediation.
>
> One can conjecture the wisdom of auto-remediation by an AV product, but
> some of the worst botch jobs I've ever worked with were done by
> well-meaning AV products that got fix-up wrong.
>
> dp
>
>
> On 1/27/15 4:13 PM, Joel Esler (jesler) wrote:
>
>> I believe I emailed this privately to you.  ClamAV can have the ability
>> to quarantine an infected file if it finds one.
>>
>> We don’t know what you mean by the word “cure”.  Can you elaborate what
>> you mean there for the group?
>>
>> --
>> Joel Esler
>> Open Source Manager
>> Threat Intelligence Team Lead
>> Talos
>>
>>
>> On Jan 27, 2015, at 7:10 PM, Jihyun-Chang > jhyun_ch...@naver.com>> wrote:
>>
>>
>> Is there no one to answer me ?
>>
>> ===
>>
>> Dear ClamAV Team,
>>
>>
>>
>> Hi~ I am a student interested in security.
>>
>> I found ClamAV as Anti-virus program and it looks good to me while
>> looking through User-manual.
>>
>> I have a few questions about ClamAV. Does it can use as a cure (It means
>> ClamAV can fix the scanned files) or just virus-scanner ? (It means ClamAV
>> cannot support fix the scanned files)
>>
>> It seems not mentioned in User-manual and http://www.clamav.net/index.
>> html.
>>
>> It may not have seen my eyes only :)
>>
>>
>>
>> Could you explain my request?
>>
>> I will be looking forward to your reply.
>>
>>
>>
>> Thanks in advance for any help.
>>
>>
>>
>>
>> ~Chang~
>>
>>
>> -Original Message-
>> From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
>> To: "Joel Esler (jesler)"mailto:jes...@cisco.com>>;
>> Cc: "clamav-devel-ow...@lists.clamav.net> devel-ow...@lists.clamav.net>"> >; "clamav-users-owner@lists.
>> clamav.net"<
>> clamav-users-ow...@lists.clamav.net> users-ow...@lists.clamav.net>>;
>> Sent: 2015-01-27 (화) 11:29:01
>> Subject: Re: I have some queries about ClamAV
>>
>>
>> I wrote the user list already but nobody answer my questuon for two
>> weeks. I don't know why it is taking so long. Even though my question is
>> not difficult.
>>
>> thanks. Best regards.
>>
>> -Original Message-
>> From: "Joel Esler (jesler)" mailto:jes...@cisco.com>>
>> To: Jihyun-Chang mailto:jhyun_ch...@naver.com>>
>> Cc: "clamav-devel-ow...@lists.clamav.net> devel-ow...@lists.clamav.net>" > >
>> Sent: 2015. 1. 27. 오전 11:20:20
>> Subject: Re: I have some queries about ClamAV
>>
>> You are writing the development list.  You should be writing the users
>> list unless you are contributing development code.
>>
>> --
>> Joel Esler
>> Sent from my iPhone
>>
>> On Jan 26, 2015, at 9:07 PM, Jihyun-Chang > jhyun_ch...@naver.com>> wrote:
>>
>>
>> can you hear me ?
>>
>> I'm waiting answer from ClamAV team long time ago..
>>
>>
>>
>> -Original Message-
>> From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
>> To: mailto:clamav-de...@lists.clamav.net
>> >>;
>> Cc:
>> Sent: 2015-01-22 (목) 17:19:18
>> Subject: I have some queries about ClamAV
>>
>>
>>
>>
>> Dear ClamAV Team,
>>
>>
>>
>> Hi~ I am a student interested in security.
>>
>> I found ClamAV as Anti-virus program and it looks good to me while
>> looking through User-manual.
>>
>> I have a few questions about ClamAV. Does it can use as a cure (It means
>> ClamAV can fix the scanned files) or just virus-scanner ? (It means ClamAV
>> cannot support fix the scanned files)
>>
>> It seems not mentioned in User-manual and http://www.clamav.net/index.
>> html.
>>
>> It may not have seen my eyes only :)
>>
>>
>>
>> Could you explain my request?
>>
>> I will be looking forward to your reply.
>>
>>
>>
>> Thanks in advance for any help.
>>
>>
>>
>>
>> ~Chang~
>>
>>
>>
>> [http://mail.naver.com/readReceipt/notify/?img=FmFjWNkl1zcYar%
>> 2B5M6CoMrU9KziCFAb9MxMdFxkoF4UXpxk4Frp0Kqu%2FKxF4MdIo%
>> 2BrkSKxt5W4d5W4C5bX0q%2BzkR74FTWx%2FsMrwCW6Jr7630%
>> 2B4kn76eXW4kZtzwGbX3q74FnM69C%2BSl5pBt5.gif]
>> [http://mail.naver.com/readReceipt/notify/?img=FY%2BjWNkl1zcYar%
>> 2B5M6CoKxUwpxbXFxMXM43SKx0vM6FoFxE9Fq0vMoblpzMmtzFXp6UwaLl5W
>> Ll51zlqDBFdp6d5MreRhoR8pBFnpBigMr0qMrY5MreR.gif]
>>
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
>
> ___
> Help us build a comprehensiv

Re: [clamav-users] I have some queries about ClamAV

[Dennis Peterson]

He wants to know if ClamAV takes any corrective action such as quarantine or 
even remediate the problem by replacing corrupted files with originals. ClamAV 
does neither, but it can alert tertiary software to perform quarantining and 
provide notification of a need for user initiated remediation.


One can conjecture the wisdom of auto-remediation by an AV product, but some of 
the worst botch jobs I've ever worked with were done by well-meaning AV products 
that got fix-up wrong.


dp

On 1/27/15 4:13 PM, Joel Esler (jesler) wrote:

I believe I emailed this privately to you.  ClamAV can have the ability to 
quarantine an infected file if it finds one.

We don’t know what you mean by the word “cure”.  Can you elaborate what you 
mean there for the group?

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos


On Jan 27, 2015, at 7:10 PM, Jihyun-Chang 
mailto:jhyun_ch...@naver.com>> wrote:


Is there no one to answer me ?

===

Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while looking 
through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means ClamAV 
can fix the scanned files) or just virus-scanner ? (It means ClamAV cannot 
support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~


-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: "Joel Esler (jesler)"mailto:jes...@cisco.com>>;
Cc: 
"clamav-devel-ow...@lists.clamav.net"mailto:clamav-devel-ow...@lists.clamav.net>>;
 
"clamav-users-ow...@lists.clamav.net"mailto:clamav-users-ow...@lists.clamav.net>>;
Sent: 2015-01-27 (화) 11:29:01
Subject: Re: I have some queries about ClamAV


I wrote the user list already but nobody answer my questuon for two weeks. I 
don't know why it is taking so long. Even though my question is not difficult.

thanks. Best regards.

-Original Message-
From: "Joel Esler (jesler)" mailto:jes...@cisco.com>>
To: Jihyun-Chang mailto:jhyun_ch...@naver.com>>
Cc: "clamav-devel-ow...@lists.clamav.net" 
mailto:clamav-devel-ow...@lists.clamav.net>>
Sent: 2015. 1. 27. 오전 11:20:20
Subject: Re: I have some queries about ClamAV

You are writing the development list.  You should be writing the users list 
unless you are contributing development code.

--
Joel Esler
Sent from my iPhone

On Jan 26, 2015, at 9:07 PM, Jihyun-Chang 
mailto:jhyun_ch...@naver.com>> wrote:


can you hear me ?

I'm waiting answer from ClamAV team long time ago..



-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: mailto:clamav-de...@lists.clamav.net>>;
Cc:
Sent: 2015-01-22 (목) 17:19:18
Subject: I have some queries about ClamAV




Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while looking 
through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means ClamAV 
can fix the scanned files) or just virus-scanner ? (It means ClamAV cannot 
support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~



[http://mail.naver.com/readReceipt/notify/?img=FmFjWNkl1zcYar%2B5M6CoMrU9KziCFAb9MxMdFxkoF4UXpxk4Frp0Kqu%2FKxF4MdIo%2BrkSKxt5W4d5W4C5bX0q%2BzkR74FTWx%2FsMrwCW6Jr7630%2B4kn76eXW4kZtzwGbX3q74FnM69C%2BSl5pBt5.gif]
[http://mail.naver.com/readReceipt/notify/?img=FY%2BjWNkl1zcYar%2B5M6CoKxUwpxbXFxMXM43SKx0vM6FoFxE9Fq0vMoblpzMmtzFXp6UwaLl5WLl51zlqDBFdp6d5MreRhoR8pBFnpBigMr0qMrY5MreR.gif]

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] I have some queries about ClamAV

[Joel Esler (jesler)]

I believe I emailed this privately to you.  ClamAV can have the ability to 
quarantine an infected file if it finds one.

We don’t know what you mean by the word “cure”.  Can you elaborate what you 
mean there for the group?

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos


On Jan 27, 2015, at 7:10 PM, Jihyun-Chang 
mailto:jhyun_ch...@naver.com>> wrote:


Is there no one to answer me ?

===

Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while looking 
through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means ClamAV 
can fix the scanned files) or just virus-scanner ? (It means ClamAV cannot 
support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~


-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: "Joel Esler (jesler)"mailto:jes...@cisco.com>>;
Cc: 
"clamav-devel-ow...@lists.clamav.net"mailto:clamav-devel-ow...@lists.clamav.net>>;
 
"clamav-users-ow...@lists.clamav.net"mailto:clamav-users-ow...@lists.clamav.net>>;
Sent: 2015-01-27 (화) 11:29:01
Subject: Re: I have some queries about ClamAV


I wrote the user list already but nobody answer my questuon for two weeks. I 
don't know why it is taking so long. Even though my question is not difficult.

thanks. Best regards.

-Original Message-
From: "Joel Esler (jesler)" mailto:jes...@cisco.com>>
To: Jihyun-Chang mailto:jhyun_ch...@naver.com>>
Cc: 
"clamav-devel-ow...@lists.clamav.net"
 
mailto:clamav-devel-ow...@lists.clamav.net>>
Sent: 2015. 1. 27. 오전 11:20:20
Subject: Re: I have some queries about ClamAV

You are writing the development list.  You should be writing the users list 
unless you are contributing development code.

--
Joel Esler
Sent from my iPhone

On Jan 26, 2015, at 9:07 PM, Jihyun-Chang 
mailto:jhyun_ch...@naver.com>> wrote:


can you hear me ?

I'm waiting answer from ClamAV team long time ago..



-Original Message-
From: "Jihyun-Chang"mailto:jhyun_ch...@naver.com>>
To: mailto:clamav-de...@lists.clamav.net>>;
Cc:
Sent: 2015-01-22 (목) 17:19:18
Subject: I have some queries about ClamAV




Dear ClamAV Team,



Hi~ I am a student interested in security.

I found ClamAV as Anti-virus program and it looks good to me while looking 
through User-manual.

I have a few questions about ClamAV. Does it can use as a cure (It means ClamAV 
can fix the scanned files) or just virus-scanner ? (It means ClamAV cannot 
support fix the scanned files)

It seems not mentioned in User-manual and http://www.clamav.net/index.html.

It may not have seen my eyes only :)



Could you explain my request?

I will be looking forward to your reply.



Thanks in advance for any help.




~Chang~



[http://mail.naver.com/readReceipt/notify/?img=FmFjWNkl1zcYar%2B5M6CoMrU9KziCFAb9MxMdFxkoF4UXpxk4Frp0Kqu%2FKxF4MdIo%2BrkSKxt5W4d5W4C5bX0q%2BzkR74FTWx%2FsMrwCW6Jr7630%2B4kn76eXW4kZtzwGbX3q74FnM69C%2BSl5pBt5.gif]
[http://mail.naver.com/readReceipt/notify/?img=FY%2BjWNkl1zcYar%2B5M6CoKxUwpxbXFxMXM43SKx0vM6FoFxE9Fq0vMoblpzMmtzFXp6UwaLl5WLl51zlqDBFdp6d5MreRhoR8pBFnpBigMr0qMrY5MreR.gif]

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml