Help - Search - Members - Calendar
Full Version: Heal Infected Files?
Lavasoft Support Forums > Lavasoft Product Families > Lavasoft Anti-Virus Helix
Remlap
Some AV programs will attempt to heal an infected file. From what I've read about Helix, it only detects, quarantines and/or deletes.

Do you know if Helix also attempts to heal infected files?

Also, is the antivirus portion of Ad-Aware Plus different from Helix?
LS CalamityJane
Hi Remlap, and welcome to the forum! smile.gif

Now your question I can answer, but do you mind if I split your question into it's own topic because it's a very good one and a bit different from the original question posed in this topic?

1. Information about the Repair option is in bold and blue highlighted in the text below. In the help manual that comes with Helix is a section called Detection and the first section under that is Scanner

It says this about the types of detection and what the different options are for remediation.
QUOTE
Name and Path of the Currently Detected Virus or Unwanted Program

The name and path of the currently detected virus or unwanted program is displayed in the middle window of the message.

Options

Note
In Interactive mode, if the detection is a heuristic hit (HEUR/), an unusual runtime compression tool (PCK/) or a file with a hidden file extension (HEUR-DBLEXT/), the only options available are Move to quarantine and Ignore. In Automatic mode, the detection is automatically moved to quarantine. This restriction prevents detected files, which could be false positives, from being directly removed (deleted) from your computer. The file can be recovered at any time with the aid of the Quarantine Manager.

Repair

If this option is enabled, the Scanner repairs the affected file.

Note
The option Repair can only be enabled if a repair of the detected file is possible.

Move to quarantine


If this option is enabled, the Scanner moves the file to quarantine. The file can be restored from the Quarantine Manager if it is of informative value or - if necessary - sent to the Lavasoft Malware Research Center. Depending on the file, further selection options are available in the Quarantine Manager.

Delete

If this option is enabled, the file is deleted but can be restored if necessary with appropriate tools (e.g. Lavasoft UnErase). The virus pattern can still be detected again. This process is much quicker than Overwrite and delete.

Overwrite and delete (Wipe)

If this option is enabled, the Scanner overwrites the file with a default pattern and then deletes it. It cannot be restored.

Rename


If this option is enabled, the Scanner renames the file. Direct access to these files (e.g. by double-clicking) is therefore no longer possible. Files can later be repaired and given their original names.

Ignore


If this option is enabled, access to the file is allowed and the file is left as it is.

Warning

The affected file remains active on your workstation. It may cause serious damage on your workstation.

Copy file to quarantine before action

If this option is enabled, the Scanner creates a back-up copy before carrying out the requested action. The back-up copy is saved in quarantine. It can be restored from the Quarantine Manager if it is of informative value or - if necessary - sent to the Lavasoft Malware Research Center. Depending on the file, further selection options are available in the Quarantine Manager.

Apply selection to all following detections

If this option is enabled, the Scanner uses the selected option for all malware detected during the scan.

Alert Message in the Case of a Blocked File

If the required action cannot be carried out by the Scanner in the event of a detection, the file is blocked (this could be the result of another application or of your operating system).


Delete blocked file after restart

When the option is enabled, the blocked file is immediately deleted during the boot process after a restart.

Ignore

If this option is enabled, access to the file is allowed and the file is left as it is.

Warning
The affected file remains active on your workstation. It may cause serious damage on your workstation.

Apply selection to all following blocked files

When the option is enabled, the Scanner uses the selected option for all blocked files containing a virus or unwanted program.


So, yes it will attempt to repair an infected file but only IF the file is repairable.

We will be adding a FAQ page (probably today sometime) for Lavasoft Antivirus Helix and one of them is about the "repair" option. Basically it will explain why some files cannot be repaired
QUOTE
"The Repair option works only for files, which have been modified by a virus. The virus itself can not be repaired, because it does not modify an original file - the file is the virus.

The program includes the Repair feature, but it can be used seldom, due to the reduced number of modified files. Most of the detected viruses, worms and Trojans are components of the viral main file and they reach the system afterwards."


2. The AV engine (extended engine) in Ad-Aware plus is based upon the same Avira technology as the Antivirus Helix. It works when scanning, however, it doesn't have the same features/options that the Antivirus program does (like webguard, for instance)
Remlap
Thank you!
LS CalamityJane
You're quite welcome! Your question and our answer may help someone else so thank you for posting smile.gif

I'm now going to split this out to it's own new topic called: Heal Infected Files?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.