- Dec 8, 2014
- 206
I guess that it's not possible most of the time since it involves a phase where it attempts to handle file contents to be recovered and that's dangerous. In other words, it's a file reconstruction attempt. The result is not guaranteed and it depends on the format.
You should note that a simple information removal or alteration will render the file unusable (corrupt). Besides that, most heuristics-based products flag corrupt files (files that do not respect the PE specifications) and that's why some vendors use two additional categorizations such as unknown (malware) and unknown (goodware).
You should note that a simple information removal or alteration will render the file unusable (corrupt). Besides that, most heuristics-based products flag corrupt files (files that do not respect the PE specifications) and that's why some vendors use two additional categorizations such as unknown (malware) and unknown (goodware).
- Jun 21, 2014
- 1,044
- Jul 12, 2015
- 30
- Jul 25, 2014
- 272
- Jun 20, 2015
- 24
- Oct 23, 2012
- 12,527
Thread title changed to "Antivirus which can disinfect valid files without deleting them". The original title was a bit misleading.
The OP's question was not what AV provides the best disinfection but "My question is there any AV which can disinfect the valid files( pdf, doc, xls etc) without deleting it ?"
To stay on topic replies should be to the above question and no what AV they feel provides the best disinfection
Like I said, some AVs will attempt to do it - like Kaspersky - but in 99.999 % of the cases I have seen the original file is not recoverable due to corruption (damage).
Back-up valuable documents as a course of habit(file backup) - and be sure not to backup malware (system backup) !!!!!
- Apr 3, 2014
- 1,460
the best way you can retrieve deleted documents is system restore, only from vista and higher not XP.
of course that if the virus did not disable system restore.
as for the question I don't know but I think MSE has a good ability to disinfect.
- Jan 9, 2013
- 1,457
Correct me if I'm wrong but documents are not covered by System Restore (only executables, dlls, settings)
Best way to retrieve these infected docs is through backups, did you make a backup in the first place?
- Apr 3, 2014
- 1,460
- Jan 9, 2013
- 1,457
Tested System Restore. Moved some files around, made some changes. After Restoring, here what I got
only *.reg files are restored
I'm using Windows 7
only *.reg files are restored
I'm using Windows 7
- Jul 12, 2015
- 30
I believe a lot of people have suggested good choices of AV's that can disinfect valid files regardless of what type of files. If there is any AV's out there that can disinfect most files rather then quarantine then I am sure the choices of AV suggested by users would disinfect the valid files( pdf, doc, xls etc) without deleting it.
- Oct 23, 2012
- 12,527
I believe a lot of people have suggested good choices of AV's that can disinfect valid files regardless of what type of files. If there is any AV's out there that can disinfect most files rather then quarantine then I am sure the choices of AV suggested by users would disinfect the valid files( pdf, doc, xls etc) without deleting it.
The reason for my above reply was because the original thread title was "Antivirus with the best disinfection" and then contained this question in the reply "My question is there any AV which can disinfect the valid files( pdf, doc, xls etc) without deleting it ?"
I agree that many suggested good AV choices for disinfection but the one or two word responses such as "AV X & AV Y " seemed to be based off the original thread title and not answering the OP's question.
This was just a heads up for those who may have responded based on the original thread title and not the question that the OP was really asking.
I agree.Backing up your clean files is extremely important and as you said recovering the original clean file from a backup will be your only option due to corruption of the file.
Most AV's will attempt to disinfect the file and if it cannot be disinfected then it will be deleted.
Correct me if I am wrong but the majority of infected files cannot be disinfected because they contain nothing but the infected code.
@exterminator20 you are correct... (essentially) nothing but infected code.
It is best to just ditch the whole file - really - as it is mostly an exercise in futility to disinfect PDFs and docs. It depends upon the exact nature\type of infection and whether or not the vendor includes a robust removal routine in their soft that covers PDFs\docs.
I can understand why someone would want to disinfect an important document. It's just not realistic to expect that the disinfected document will be usable.
In any case, I circumvent the whole infected document scenario by simply not using Microsoft Office and Adobe products - without any significant loss of pdf or various doc type functionality.
Instead I use WPS and NitroPDF. In my case, if a PDF or doc is infected, it does not execute and\or the exploit is "inert" since the infection does not function with any other PDF\doc softs except the one for which it was coded (MS, Adobe).
Other PDF\doc softs very likely can be compromised, but malware authors do not target them - for it is not financially worthwhile to target apps that are installed on only a small % of all systems. Malware writers need to cast the widest net possible to get "paid" = they target the most widely distributed softs with vulnerabilities that they can actually exploit.
Makes sense, doesn't it ?
In any case, I circumvent the whole infected document scenario by simply not using Microsoft Office and Adobe products - without any significant loss of pdf or various doc type functionality.
Instead I use WPS and NitroPDF. In my case, if a PDF or doc is infected, it does not execute and\or the exploit is "inert" since the infection does not function with any other PDF\doc softs except the one for which it was coded (MS, Adobe).
Other PDF\doc softs very likely can be compromised, but malware authors do not target them - for it is not financially worthwhile to target apps that are installed on only a small % of all systems. Malware writers need to cast the widest net possible to get "paid" = they target the most widely distributed softs with vulnerabilities that they can actually exploit.
Makes sense, doesn't it ?
- Apr 3, 2014
- 1,460
Tested System Restore. Moved some files around, made some changes. After Restoring, here what I got
only *.reg files are restored
I'm using Windows 7
Last edited:
Similar threads
- Locked
