What is the use of this option "Rescan Quarantined Files"?

Discussion in 'ESET NOD32 Antivirus' started by stimulator32, Nov 30, 2009.

Thread Status:
Not open for further replies.
  1. stimulator32

    stimulator32 Registered Member

    Joined:
    Jan 12, 2009
    Posts:
    104
    Hello,


    30-11-2009 1-31-28 PM.jpg


    Although I quarantined an undetected file, and after I updated the av, the reason of quarantining the file still "added by user" and didn't convert to the new detection name!!


    30-11-2009 1-32-01 PM.jpg


    So, what is the use of this option "Rescan Quarantined Files"?
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    did you submit that file, assuming it is malware, to Eset so that is included in detection?
     
  3. stimulator32

    stimulator32 Registered Member

    Joined:
    Jan 12, 2009
    Posts:
    104

    30-11-2009 1-59-04 PM.jpg


    The file now is detected .. but it wasn't detected when it was quarantined ..
     
    Last edited: Nov 30, 2009
  4. stimulator32

    stimulator32 Registered Member

    Joined:
    Jan 12, 2009
    Posts:
    104
    ESET's Moderators ..

    Is it out of question to answer my enquiry?

    The Option Is In Your Program .. And it is shame on you to disregard an ESET customer's questions!!

    I want to tell you that your technical support is a rock-bottom one.

    Bad dealing !!
     
  5. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    668
    What's actually the problem?

    You've manually added a file to the quarantine, so it's now in quarantine. Later definitions detect the file.

    So what? What's the problem here?



    Jim
     
  6. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    The OP question refers to the rescan option...

    My guess for the existence of the Quarantine rescan option is:

    After the signature update, an item which is kept in the quarantine may be proven to be 'innocent', therefore it can be restored to its original location. Why was it put in the Q in the first place? Maybe a false positive, or a suspicion by the user awaiting for new signatures or updates...
     
  7. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    668
    I'm still not sure what the OP is asking though, since to me the description is patently obvious - do you want to rescan quarantined files after an update. Simple as that.

    So let's say a file gets quarantined, either manually or automatically. A subsequent definition might flag that as a false positive.

    Or am I missing something?



    Jim
     
  8. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    Or it might have been detected as a Possible Variant of VirusX and quarantined. Then after an update the definitions are updated so it changes to Win32.PSW.VirusX.GAR (or whatever) confirming what the virus is.

    Perhaps stimulator32 doesn't know new malware doesn't get added to detections immediately and they might take a bit of time.
     
  9. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    One would assume this option is available to the end that quarantined files can be rescanned with new definition file updates, if they are deemed harmless, they can be safely removed and restored.
    If the quarantined files prove to be false positives submit them to ESET for analysis
     
Thread Status:
Not open for further replies.