Rescan quarrantine after updating... and?

[Quitch]

Neither the program nor Help specifies what happens to files in quarantine which are rescanned after a definition update. If a file can be cleaned or is found to be a false positive, what does the program do?

[Marcos]

{QUOTE-> Neither the program nor Help specifies what happens to files in quarantine which are rescanned after a definition update. If a file can be cleaned or is found to be a false positive, what does the program do? <-QUOTE}

Nothing happens. If you're positive that there's an FP that's been remedied, restore it from quarantine and rescan it.

[CivilTaz]

If nothing happens, then files in quarantine shouldn't be scanned after an update, u should remove that option.

[Quitch]

{QUOTE-> Nothing happens. If you're positive that there's an FP that's been remedied, restore it from quarantine and rescan it. <-QUOTE}

Then what's the point of that option? What's the point of the rescan? It would be very handy if the program did something along the lines of rescanning then if it gets three positives or three clears in a row then it pops up and offers to delete/restore the file (as appropriate), along with a new option in Advanced Options to make this an automatic delete/restore.

[Quitch]

{QUOTE-> If a file in Quarantine is re-scanned and is now cleanable via newer definitions the file will be cleaned and restored. You should receive notification that a file has been cleaned. <-QUOTE}

Well now I'm just plain confused. Do restores only happen if the virus is still confirmed but now cleaned, while a now clean file is ignored?

[funkydude]

Yeah I noticed this a while back, I was hoping it would be added in v4 but, haven't tried that yet.

[Quitch]

{QUOTE-> It will only be actual virus files which are infected and can be cleaned that will be returned the original location. As most threats these days use whole files and rarely change/attach themselves to other 'normal' files there is rarely anything to clean. False positives would need to be restored manually at which point if it is still detected it will be moved back to quarantine automatically by the real-time scanning of Eset. <-QUOTE}

This clears it up.