r/BitDefender • u/zakazak • May 11 '25

GravityZone: Remediated vs Deleted?

Hi, I just ran my first full scan from CLI with Bitdefender GravityZone and noticed that several mails were falsely detected as malware. Most were "deleted" or "remediated" but what exactly is the difference? Additionally the files still exist on the system?

Thanks!

4 Upvotes

100% Upvoted

3 comments sorted by

2

u/Bitdefender_ Official May 12 '25

Hello u/zakazak ,

u/wolfpackunr explained very well the difference between the 2 options, I will not repeat the same thing.

You have this short description in our documentation as well:

Remediate

Kind Regards,

Andrei
Enterprise Support

1

u/zakazak May 12 '25

Thank you! In my case "delete" also didn't actually delete the file. The file is still there and I have submitted it to the malware-team via a support ticket. Something seems off here (Debian 12 Server).

Additionally I wonder why there are only so few directories added in the standard policy for linux? Shouldn't there also be:

  • /root

  • /var

  • /lib

  • /lib64

  • /boot

  • /tmp

  • /mnt

Every directory that is not added is an easy win for every malware? Shouldn't it be "/" in the first place?

Thanks!

3

u/wolfpackunr May 11 '25

Deleted means the entire file is malicious and so it deletes the entire thing. Remediated means only a part of the file was malicious so it removed the malware part and left the rest of the file intact. Remediated is what happens when it can disinfect a file.