It is a good thing that antivirus and anti-malware applications can deal with machine infections without much effort. Most security applications, such as MalwareFox , can intercept malicious files without you noticing anything. However, it might be surprising to most people that antivirus programs do not delete the malicious files right away.
These files are put in quarantine until you decide what to do with it. Or the security program will delete it up to a certain amount of time in quarantine. When a security program quarantines a questionable file, a virus, or a malicious software, it moves the said files to a safe location. The security program manages the location itself where it neutralizes all functions and executable commands of the file. Essentially, the file still exists.
The security program forcibly stops its functions. Think of quarantining a sick person. They are normally in a different location away from the rest of the population to control the infection. Understanding the reason behind the quarantine method needs a little bit of insight as to how a virus operates. Probably infected status may be assigned to a file in the following cases:. Kaspersky Internet Security anti-virus databases contain information about threats that have been already analyzed by Kaspersky Lab specialists.
If the anti-virus databases do not yet contain any information about a modification of a threat, Kaspersky Internet Security classifies objects infected with a modification as probably infected ones and indicates the threat that most resembles this type of infection.
A probably infected file can be detected and moved to Quarantine by File Anti-Virus , as well as while running virus scan tasks. When Kaspersky Internet Security moves a probably infected file to Quarantine, it deletes the object from the current folder and saves it in Quarantine. View quarantined objects. Quarantined objects are displayed in the Quarantine section.
You can restore backup copies of files from Quarantine or delete them. Important: We do not recommend that you restore backup copies of files unless absolutely necessary, because this could lead to an infection of your computer. One removes the file from your computer, and the other tries to heal the infected data.
Quarantine moves the offending file. Knowing which action to take in a given situation is crucial to the health of your computer. Here's a quick rundown of their functions:.
Deletion is tricky. If you instruct your antivirus software to delete all infected files, some that are crucial to your computer's operating system might get deleted.
This could affect the functionality of your operating system and programs. Cleaning can be useful, but antivirus software can't clean a worm or a Trojan because there is nothing to clean; the entire file is the worm or Trojan. Quarantine occupies the middle ground, moving the file to safe storage that's under the control of the antivirus application so that it can't harm your system.
This gives you the option to restore the file in case you decide the file was mistakenly tagged as harmful. Generally speaking, the best option for a worm or Trojan is to quarantine or delete. If it's a true virus, the best option is to clean.
However, this assumes you are able to distinguish exactly what type it is, which might not always be the case. The best rule of thumb is to proceed along the continuum from the safe option to the safest. So, continue to read to get the real differences, Delete: It is better to check the importance of the affected file.
If the user does not require the file anymore or has already a backup of that file then he can just delete it. However, once deleted, the file will be removed from the computer and you can never use it.
Clean: If the user needs the file later, or he does not have a second copy or backup of that file then just clean the infected part and keep it. Quarantine: Quarantine the file means that the file is moved to a safer isolated place to isolate them from the rest of operating system.
Even though that file is virus infected file, however, it cannot do any damage to the operating system. Many times an anti-virus software detect a false positive and move it to quarantine. In such case, a user can restore that file back. It is not always that the user can recognize the infection. If it is a virus, the infection can be cleaned.
0コメント