Questions tagged [quarantine]

Quarantine is a functionality in antivirus programs intended to render malware files harmless.

Filter by
Sorted by
Tagged with
3
votes
1answer
98 views

How can I improve my sheep dipping process?

Problem: The hiring department occasionally sends me Word documents asking to clear the file as "safe" to open and review for purposes like resumes etc.; they can come from anywhere and are ...
0
votes
0answers
62 views

Is quarantine threats absolutely necessary? Every time I do, all my Chrome tabs crash

I have been talking backwards and forwards with a MalwareByte support, because every time I run 'quarantine threats' all my Chrome tabs crash. This guy keeps asking me to switch Google sync off, and ...
2
votes
1answer
92 views

As a Software Industry Editor, how to avoid my software being quarantined?

I'm a well established software company. For more than 30 years, my business has been delivering both hardware and software. My Windows software is being quarantined by some of my customer's ...
20
votes
2answers
4k views

How to remove quarantined virus securely?

There is a file found by antivirus program and it was put into the virus' quarantine section (its not a false positive). Now I don't know how to handle this "quarantined" files. What is the best ...
1
vote
2answers
798 views

Bypassing Windows Defender VBA custom code

I've recently written a simple keylogger using classic DLL-injection technique. I wanted to simulate a real phishing attack where the user opens an Office document with macros and by enabling them he ...
0
votes
2answers
162 views

Python Antivirus comparing hashes [closed]

I'm writing an antivirus in python mostly to learn and for research purposes, I do understand it would be more efficient to do this in something like C and eventually I will port this over. So far I ...
0
votes
0answers
70 views

Unknown process attempted to execute code

This morning I booted up my computer and not long afterward, got a notification from ByteFence (unsubscribed) that an unknown process attempted to execute a command that was deemed unwanted. ByteFence ...
0
votes
2answers
206 views

If a host is infected is the sandbox environment infected?

Say my host machine is infected and I have a sandbox program. Will that sandbox environment then be infected also? If the answer is yes, what if I have an AV running inside of the sandbox. Will it ...
4
votes
2answers
398 views

MalwareBytes Quarantine

MalwareBytes has the ability to quarantine or to quote MB: At that time, they were removed from the disk location where they were stored, placed in quarantine, and modified so that they could not ...
0
votes
1answer
99 views

Programmatically Quarantining files

Situation: Using Python to make a simple quarantine software for malware. What I know: I do understand (from this forum no less) that one of the ways is to put the file in a quarantine directory and ...
0
votes
1answer
161 views

Are there differences between McAfee quarantine and other AV quarantining mechanisms?

I'm working on a documentation of an IT system and I want to describe what is happening, when McAfee finds and quarantines a suspicious file. I have read the many questions on quarantining, but all ...
17
votes
4answers
2k views

How AV software makes sure quarantined files never get executed? [duplicate]

This Super User question made me ask, is it really a good idea to keep files in quarantine, when you don't know what they are yet? For what I know there are more or less 2 steps that need to be ...
4
votes
1answer
903 views

What is quarantine?

What do antiviruses actually do when quarantining a malicious threat? Does it compress the file using some algorithm, does it just change the extension of the file, or does it just move the file to a ...
1
vote
1answer
126 views

Moving Infected Files to Trash versus Quarantining them

When you run an AntiVirus, typically they give you the option of quarantining the infected files. I remember when I was a kid I would move them to the trash bin instead. My question is, which method - ...
2
votes
3answers
3k views

Quarantine or add exclusion for malicious items?

I am having so many problems with my laptop. I have 8 malicious items detected and 4445 non malware items detected. Is it better to quarantine or add exclusion? I am not sure what add exclusion means.
2
votes
2answers
1k views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
40
votes
6answers
11k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...