PDA

View Full Version : Norton quarantine question


acr1965
August 9th, 2009, 12:38 PM
I had some malware found by Norton 2009 that was put in quarantine. Is there any view to see where the malware was found by Norton? Also, any way for Norton to ask me what to do with alleged found malware as opposed to automatic clean/quarantine?

Cudni
August 9th, 2009, 01:52 PM
something on these lines maybe
http://content.techrepublic.com.com/2346-1009_11-249894-25.html

acr1965
August 9th, 2009, 02:51 PM
Yes thanks. That's the view I see. But it does not show the path to where the alleged infected file was found. I just don't know how I will find the file for a second opinion if I take it out of quarantine. Plus I don't like the automated process of cleaning or putting in quarantine. I wish NAV would ask first.

ASpace
August 9th, 2009, 03:35 PM
-{ Quote: "But it does not show the path to where the alleged infected file was found. " }-

You need to click on the threat , then click the "details" button . Then , click on the last tab (the right one) and you'll be able to check what it has placed in the Q section .



-{ Quote: "I just don't know how I will find the file for a second opinion if I take it out of quarantine." }-

You could disable the Auto Protection for a while , then take it out of Q.

-{ Quote: "Plus I don't like the automated process of cleaning or putting in quarantine. I wish NAV would ask first." }-

Not possible . Norton is still the most selled (the best selled) consumer AV program in most parts of the world (or at least in the USA) and the Norton brand is by desing made for the stupid average Joe . No way to make it manual , it must be as automated as possible .

acr1965
August 9th, 2009, 04:45 PM
thanx for the info

starter15
August 9th, 2009, 09:41 PM
im using SEP 11. the only real problem that ive experienced so far is that when it does pick up a false positive, there's no way (or at least i havn't figured out a way) to tell it to ignore the file. it always automatically quarantines it. is there really no way to change this?