If The Scanner Detects A Virus; Removing A Virus Found In A File - McAfee VCLCDE-AA-DA - VirusScan Command Line Scanner Standard Product Manual

®
VirusScan Command Line 5.20.0 Product Guide

If the scanner detects a virus

Removing a virus found in a file

Viruses attack computer systems by infecting files — usually executable program files
or macros inside documents and templates. The scanner can safely remove most
common viruses from infected files.
However, some viruses are designed to damage your files. The scanner can move
these irreparably damaged or corrupted files to a quarantine directory or delete them
permanently to prevent further infection.
If the scanner cannot clean an infected file, it renames the file to prevent its use. When
a file is renamed, only the file extension (typically three letters) is changed. The
following table shows the methods of renaming.
Table 4-1 Renaming infected files
Original Renamed
Not V??
V??
V?? VIR
VIR,
V01-V99
<blank>
VIR
For example, if an infected file called
rename the file to . However, if a file of that name already exists in the
BAD.VOM
directory, the scanner attempts to rename the file to
and so on.
For file extensions with more than three letters, the name is usually not truncated. For
example, becomes
NOTEPAD.CLASS
becomes
WATER.VAPOR WATER.VIR
If the scanner detects a virus in a file, it displays the path names of infected files and
takes the action you specified. For example:
If you selected , the scanner automatically moves the infected files to the
/MOVE
specified quarantine directory.
If you selected , the scanner attempts to clean the file.
/CLEAN
If you selected and this is an
/DEL
file.
If you selected
/NORENAME
Description
File extensions that do not start with v are renamed with v as
the initial letter of the file extension. For example,
MYFILE.DOC becomes MYFILE.VOC.
File extensions that start with v are renamed as
example, MYFILE.VBs becomes MYFILE.VIR.
These files are recognized as already infected, and are not
renamed again.
Files with no extensions are given the extension,
is found, the scanner attempts to
BAD.COM
BAD.VIR
. However, an infected file called
NOTEPAD.VLASS
.
or file, the scanner deletes the infected
.EXE .COM
, the scanner does not rename the infected file.
40
Removing Infections
If the scanner detects a virus
.
VIR. For
.
VIR.
, , or ,
BAD.V01 BAD.V02
4