Malware is by definition self contained and can simply be removed. We move the file to another directory, so it cannot be executed.
Regarding security vulnerabilities, we specifically patch only those vulnerabilities. This way you can be rest assured that your customer's websites continue to function properly.
