delete / quarantine
Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: delete / quarantine

  1. #1

    Arrow delete / quarantine

    maybe one of you can shed some light on why anti virus software quarantines instead of deleting?

    what it does when it does this?
    why can it quarantine and not delete the file?

    i recently had a virus called jeefo (see other thread inthis forum), NAV could not delted the file as it said it didnt have access to the file. after doing a full system scan, i found 6 infected files which i had the option to quarantine only. NAV took about 20 mins or so to quarantine these 6 files! is that normal?

  2. #2
    Banned
    Join Date
    Oct 2002
    Posts
    133
    If I am correct, quarinteing removes the file and it's componets and immobilizes the virus and puts it in a quarintine folder.

    "Quarantine-files are used to isolate and backup items detected during the scan, giving you an option to reinstall them at a later time.
    Items moved to the quarantine folder will be encrypted and compressed, and can only be read and restored using the built in quarantine-manager. "-from Ad-Aware help file...

  3. #3
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324
    maybe one of you can shed some light on why anti virus software quarantines instead of deleting?

    what it does when it does this?
    why can it quarantine and not delete the file?
    It will give you the option to quarantine instead of just delete so you can submit it to them, or if it really isn't a virus... etc.

    Example: You download a security tool that your AV deems a "hack tool". You know what it does, and still want to use it because you know it won't do any harm to your computer.

    You can configure your AV to automatically delete it rather than just quarantine it.

  4. #4
    Senior Member
    Join Date
    Sep 2003
    Posts
    279
    try scanning in safe mode.

    If its a system file try the the "SFC" command to repair it.

    Try going into NAV options, it should have an option to delete instead or quartiene.
    AntiOnline Quick Forum Version 2b Click Here
    10010101000000110010001100111

  5. #5
    Senior Member
    Join Date
    Jan 2003
    Posts
    220
    It may be that the file is a protected system file that you cannot alter. If your not logged under your admin account you may want to try that. Also, you may try manually deleteing the file. Good luck

    NAV could not delted the file as it said it didnt have access to the file. after doing a full system scan, i found 6 infected files which i had the option to quarantine only. NAV took about 20 mins or so to quarantine these 6 files! is that normal?
    Im guessing NAV, read a bit more closely...lol
    [gloworange]And then it happened... a door opened to a world... rushing through the phone line like heroin through an addict\'s veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found. \"This is it... this is where I belong...\" I know everyone here... even if I\'ve never met them, never talked to them, may never hear from them again... I know you all...[/gloworange]

  6. #6
    Banned
    Join Date
    Oct 2002
    Posts
    133
    In my NAV you go to options-autoprotect-and its under what to do when a virus is found, you can choose to have it delet it there.

  7. #7
    Banned
    Join Date
    Apr 2003
    Posts
    1,147
    Good rule of thumb (and lately I seem to be all thumbs), exercise due caution when configuring any piece of software to automatically delete files. Even AV/security software generates false positives on the odd occasion, which can make life difficult if that false positive is a critical system file, or a unique document that you were going to back up, soon ... yeah.

    Kinda reminds me of the time I had that old 40-meg mfm drive. I just found a cool backup utility and was going to take it home and back up that dang thing. Got home, drive was DOA.

    It was also two days off warranty.

    Go figure.

  8. #8
    Banned
    Join Date
    Oct 2002
    Posts
    133
    Yea, thats the purpose of the quarentiene option, if you need it you can always get it back....

  9. #9
    Senior Member
    Join Date
    Jul 2003
    Posts
    217
    Good idea to quarantine it if you have no idea if its a file that the system needs. Unless you are absolutely sure that the file is really infected and its has no use other than for the virus then go ahead and delete. if not then you need to decide if you have any need for the file. Options to consider would to replace the file with a clean version and delete the infected one. also quarantining a file will allow you to try to clean the file later when newer updates are released from the AV company. Also a someone mentioned, false positives might be generated and quaratine is better if that happens as you can decide yourself and not rely on the program to delete files that might be of use.

    anyway, quaratine protects your system as the file cannot be accessed any more once quaratined. the file is isolated and prevented from infecting other files and spreading.

    in your case where the fle is quarntined and cannot be deleted, it could be that the file is in use. you can try to boot in safe mode or from a boot floppy and try deleting the file from there.

  10. #10
    Senior Member
    Join Date
    Aug 2003
    Posts
    119

    NAV insight

    NAV comes with an unsupported tool that deletes quarantined files. Our mail relays had a whole bunch of virus's on them due to the quarantine clause even though it is set to try to repair, then delete. There is something about since its an email it just quarantines and not deletes... o well...

    Now the reason for my post! If you pop in your NAV CD (or have it locally like I do) go to tools, NOSUPRT, then to QUARDEL. Open this up. Simple command line deleter that does very well. Now only do this if you know that you can delete the files for sure.

    This program has 6 switches

    /Q Delete Quarantine
    /R Delete Repaired Items
    /B Delete Backup Items
    /A Delete All Quarantine

    /I interactive results
    /D:[days] to delete files older than the given days

    I actually found out about this tool searching the symantec knowledge base, and it has proved valuable to me! Hope this helps some other folks out!!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •