Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Anti-Virus Quarantine


  • Please log in to reply
2 replies to this topic

#1 EdBee

EdBee

  • Members
  • 208 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 03 November 2004 - 01:05 PM

I just had someone ask me about the above. First, why does it quarantine rather than clean it? Then, what about the Q file, does it become inacessable-if so how? When a good file that that is already resident on the HD becomes infected , what then? Does the AV program clean and restore the file to it's original config? If it has to Q a good/needed file what then? Does it go to CAB files for a good file to replace it? I have looked at some of AV help sections--not much help. Pls direct us to some good refs if possible---Thanks :thumbsup: :trumpet: :flowers:
EDBEE from NMUSA- RENOWNED MALWARE FIGHTER AND SWORN ENEMY OF ALL INTERNET HIJACKERS

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,502 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:09 AM

Posted 03 November 2004 - 11:25 PM

It quarantines it in the hope that future infections will be able to clean it.

The quarantine file is usually either renamed or added to a database of files so that they can no longer be run.

If a valid file gets damaged, the AV software iwll attempt to clean it. if it cant it will attempt to move it or delete it. In the past your system was now hosed. With XP the should get replaced via windows file protection

#3 EdBee

EdBee
  • Topic Starter

  • Members
  • 208 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 05 November 2004 - 01:14 PM

Grinler-Thanks for that:
I should have thought of the "renaming" as they stick it into the quarantine. My experience with Norton has always been that when new definitions are updated/Dl and they attempt to clean the Q files, it never happens. :thumbsup:
EDBEE from NMUSA- RENOWNED MALWARE FIGHTER AND SWORN ENEMY OF ALL INTERNET HIJACKERS




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users