Jump to content

Visual bug with malware removal - youtube video


Recommended Posts

OK, here's what was happening. The scan detected a number of files that were in archives (.exe files that had embedded ZIP/RAR/etc archives in them, probably because they were installers). When the scanner detects an infection inside an archive, the cleaning engine (the component in EAM/EIS/EEK that deletes detected threats) deletes the entire archive rather than deleting the file inside the archive that was detected as malicious. When there are multiple files detected in the same archive, it gets deleted when the cleaning engine processes the first file that was detected inside the archive, and thus the archive doesn't exist anymore. When the cleaning engine tries to process the other files that were in the archive, it isn't able to, since the archive is no longer present, and thus those files remain in the list of scan results (since they couldn't be processed).

  • Upvote 1
Link to post
Share on other sites

Ok this makes sense but shouldn't it remove them from gui if they are no longer physically present? It has no reason to show them if they don't exist. 

 

In theory it could track where it removed what and delete all matching detections. Should be possible to be done.

  • Upvote 1
Link to post
Share on other sites

It does make sense to change this behavior, and there is a possibility that we may do so in the future. Note that we generally can't guarantee that a change will make it into a future version of our software until there's a publicly available beta version that has the change.

  • Upvote 1
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...