Scan files before blacklisting, make sure they're trojans, virus, or corrupt, then delete them. If a file is marked bad and it checks out fine, then that checksum stays whitelisted until it is proven to be bad.