Question about cleaning

Discussion in 'ESET NOD32 Antivirus' started by ablatt, Jul 31, 2008.

Thread Status:
Not open for further replies.
  1. ablatt

    ablatt Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    128
    Location:
    Canada
    With medium and strict cleaning, if a file is detected as infected, will it be deleted or quarantined?

    The program talks about deleting files if they can't be cleaned and I assume with the risk of false positives (and some signature problems) that files are never outright deleted, but 'deleted' means they are put in the quarantine.

    Can someone clarify please.
     
  2. ASpace

    ASpace Guest

    A file is quarantined means that it will first be copied to quarantine and then it will be deleted from its original location.

    ESET v3 products always first quarantine and then take action against malicious file(s).

    You assume right
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Deleting files without placing an encrypted copy of them in quarantine would be risky imho, especially due to the possibility of being a false positive.
     
  4. ablatt

    ablatt Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    128
    Location:
    Canada
    Thanks.

    You may want to update the help files to clarify that cleaning means quarantining.

    Also, do you guys agree with Blackspear's suggestion of 'strict cleaning' or would you leave cleaning at the default level?
     
  5. Kosak

    Kosak Registered Member

    Joined:
    Jul 25, 2007
    Posts:
    711
    Location:
    Slovakia
    Hello,

    when you have copy of deleted file in quarantine, you're sure that you won't lose clean file, which was signed as FP.

    Regards
     
Thread Status:
Not open for further replies.