Hot answers tagged

131

Viruses and malwares are not dangerous if not executed. A file in quarantine cannot be executed by the user and the malicious code (virus or malware) has no possibility to act. If the virus/malware is removable it will be removed immediately. If not the file will be moved to quarantine. There are different reasons for this: False positive (as stressed ...


88

Anti-malware applications provide a quarantine option, which is often on by default in order for two reasons: Keep a backup of the items identified as threatening in case of a false positive. Although not very common, I have seen cases of false positive on many different legitimate application files and drivers. Having the item in quarantine may allow it ...


71

For the same reason that (most) governments arrest suspected criminals instead of shooting them on the street at the slightest provocation: You want to give the suspect a chance to defend themselves, in case they actually did not commit any crime at all. And, even if they did commit a crime, you probably want to find out all about it.


3

1) Am I reading this right? All the connection which you show us are already closed. If you used a webbrowser (and visited a webpage with the twitter-link icon in it) then this seems perfectly normal. That is not to say that you could not be infected somehow, but TIME_WAIT is a state where we once had a link but it is already closed and in the process ...


1

You mention Process Explorer - is that the sysinternals one? If so locate the process in the main window, right click on it and choose "Suspend" From the help file: If you want a process to become temporarily inactive, so that a system resource such as network, CPU or disk, becomes available for other processes, you can suspend the process. ...



Only top voted, non community-wiki answers of a minimum length are eligible