Today, EAV incorrectly identified a password retrieval program as a virus. I understand why. It's made to recover people's passwords, a common activity for trojan viruses. But I works as an on-site computer technician, and I'm lucky if two weeks go by where I don't encounter someone who doesn't know their passwords (why the heck is it SO difficult for people to record these things in a neat, orderly fashion, and keep it somewhere you'll REMEMBER it?!) So I went to EAV's quarantine, and I restored it. Twenty seconds later, it identified it again, and put it right back IN quarantine. I had to manually add it to the exclusions list. It seems to me that when someone restores something from quarantine, they know that EAV considers it a threat, but still wants it. So why not provide the user with a prompt asking if they want to add it to the exclusions list, so that they don't have to keep restoring it, and or go into the control panel and add it manually. It would also be nice to have a check box under advanced controls to turn off the prompt, so that if you restore somethign from quarantine, it's automatically excluded from future scans.