McAfee ENS with Pendrive having read access only

[haaris]

Hi,

If a pendrive has malicious sample and its set to read only will McAfee ENS will be able to clean or delete the file since it doesnt have permission on the ped drive or will it still be able to delete to file and doesnt care about permission.I think it will not be able to delete the file.Also maliicous sample will not be able to execute as pendrive has read only access

Need your comments and views

[Former Member · Accepted solution]

ENS (or any AV really) can only take actions on items when it has appropriate access to the files. Whilst it will initiate a scan on a read/ write action taken on the system where the AV is installed, it can't take action on it without the appropiate permissions.

It's likely that you would see a warning advising "failed to clean".

[haaris]

Hi,

Thanks for the confirmation