BleepingComputer.com: Quarantine Or Remove?

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Quarantine Or Remove?

#1 ebrid001

Member

Group: Members
Posts: 51
Joined: 18-December 06

Posted 18 July 2008 - 11:09 AM

I have Windows XP,up to date and 512 RAM.

The re branded f secure that my dsl provides found a piece of spy ware and suggested that I "quarantine" it.

It gave me the option of changing the setting to "remove" it.

Why the distinction? Why wouldn't one "remove" spy stuff?

-----------------------

Thank you.

#2 Galadriel

Bleepin Elf

Group: Malware Response Team
Posts: 2,715
Joined: 11-November 04
Gender:Female
Location:Missouri, USA

Posted 18 July 2008 - 02:03 PM

The reason there's a quarantine option in most security scanners is to give you a way to fall back if the detection was a false positive. These programs are not fail proof. False positive can and do occur with every one of them. If a legitimate and/or necessary system file gets flagged as a threat and you remove it, there would be no way to get it back easily and could cause a lot of headaches. Hence it is safer to use Quarantine when you can. Set the files aside and purge the quarantine area after a while of using the computer with no problems. If there's a problem, quarantine should give you the option to restore the files to their original path.

Hope that helps you understand.

Regards,

I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'
Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook