In the computing world, detecting problems is far easier than fixing them. Antimalware software is better at finding viruses and the like than at cleaning up and repairing infected systems. You can’t trust a system once it’s been compromised unless you completely rebuild it. Tripwire and other “snapshot” software programs can tell you if a measured system has undergone a change, but they have no way of knowing if the measured system itself was trustworthy in the first place. The days of detection-only protection schemes are coming in the near future in computer security.”]
Source: https://www.csoonline.com/article/2619269/after-infection–new-schemes-to-restore-your-systems.html