Jump to content

Visual bug with malware removal - youtube video


SHvFl
 Share

Recommended Posts

OK, here's what was happening. The scan detected a number of files that were in archives (.exe files that had embedded ZIP/RAR/etc archives in them, probably because they were installers). When the scanner detects an infection inside an archive, the cleaning engine (the component in EAM/EIS/EEK that deletes detected threats) deletes the entire archive rather than deleting the file inside the archive that was detected as malicious. When there are multiple files detected in the same archive, it gets deleted when the cleaning engine processes the first file that was detected inside the archive, and thus the archive doesn't exist anymore. When the cleaning engine tries to process the other files that were in the archive, it isn't able to, since the archive is no longer present, and thus those files remain in the list of scan results (since they couldn't be processed).

  • Upvote 1
Link to comment
Share on other sites

Ok this makes sense but shouldn't it remove them from gui if they are no longer physically present? It has no reason to show them if they don't exist. 

 

In theory it could track where it removed what and delete all matching detections. Should be possible to be done.

  • Upvote 1
Link to comment
Share on other sites

It does make sense to change this behavior, and there is a possibility that we may do so in the future. Note that we generally can't guarantee that a change will make it into a future version of our software until there's a publicly available beta version that has the change.

  • Upvote 1
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...