23 total posts
Thx.I DO trust YOU.!!
ALSO,THX FOR THE EXTRA SECTION.!!
this might be off topic but i really like what you said:
The only stupid question is the one you didn't ask.
What they 'the experts' may have said about Quarantine
I have read in a couple security programs and I can almost hear my IT buddy saying something to that effect, that you quarantine to see what the file is and to determine if deleting it could take out something running on your system. If so then they have a few options depending upon the situation. I have never ran into this situation, but I have read that before.
But the norm is that a Trojan would come in on a recent download, otherwise you would hope your security suite or whatever security you do run would have caught it and not let it hide in your system.
This post is nothing more than why you may have heard that from some peeople. Keep it clean!
When a trojan is discovered by your anti-virus program, you need to perform two tasks!
1 You need to turn off your system restore. (click on the start button then proceed to All Programs and click on Accessories, then System Tools and then System Restore. Click on System Restore Settings on the bottom left corner of the open window. Under the System Restore tab click on Turn off System Restore. Click apply and then click OK.
2 You should then delete the trojan and run a virus scan one more time to find out if the trojan had moved. Again, delete any trojans and then turn on the System Restore.
Thanks to everyone for all the good information,AND advice.Appreciate everyone taking the time to respond.That goes for ALL questions I inquire about.Thanks again,everyone.!!
no they wont.
no they wont, but a trojan is something that masquerade as something else. taken from greek history of the trojan war where they built a big wooden horse as a gift to the trojans, but inside was a small platoon of soldiers who waited untill nightfall before exiting and killing an entire garrison. so a trojan is a program that pretends to be something legitimate, like a windows system file. if a trojan was found to be a windows system file and you deleted it, good things wont always happen. thats what quarentine is for. its a safe guard so to speak. delete it or quarentine it, it makes no difference. quarentine is entirely safe, and a good safety net.
Hmm,back 2 orig. query.!
The above reply brings me full circle to my original inquiry.NightmaresOnwax has an opinion that concurs with the "experts" that I spoke of in the original post.I guess every comp. user has to make the decision for themselves.There is some validity in BOTH opinions,the user just has to decide which makes more sense to them personally.Thanks again to everyone who took part in this discussion.Very intriguing.If anyone else would like to enter an opinion,feel free to add to this discussion.More thoughts to choose from,better helping someone to make a wise choice.
RE: Keep Quarantined OR Delete.??
Since most of the time trojans are non system related files, and they just come off the web, you'll be fine to delete them.
One major exception to your statement that "most of the time trojans are non system related files" is a common trojan that infects "winlogon.exe".. Without that particular "system file", the computer doesn't boot.. I've cleaned up a number of infected computers where removing the infected "winlogon.exe" file prevented the computer from restarting.. Each one required a replacement of the said file from the Recovery Console for the machine to start correctly.
Hope this helps.
delete, but with care
Some have already hinted at this, but no one explained it clearly. Anti-virus programs are not perfect. Sometimes they delete files that are NOT trojans or viruses by mistake. Sometimes they delete important system files, or programs that were just installed. If you quarantine instead of delete, then you have the chance to check the files and check your system performance. If something was flagged by mistake, you have the opportunity to restore it. Once you delete it, it's too late. Sometimes, software instructions tell you to turn off your antivirus before installing to avoid just this sort of problem (only trust such instructions if they're from a trusted, name brand company, only only if installed from a retail CD or downloaded from a well-trusted source).
piggybacking on the subject
so my bf got a trojan which was quarantined and deleted but my bf happened to reinfect the pc by accident w/ the same trojan and the the virus protection did not detect it the second time around. i read somewhere that it's a good idea to leave items quarantined because the same trojan, virus, etc. could have a different strand that won't be detected if deleted. so therefore i had to to install a different program which detected it and now it's sitting in quarantine. so my question is should it just sit in quarantine indefinitely since there is a possibility of reinfection and non-detection? i currently have 3 virus protection programs on my pc one that is a paid subscription and the least effective
woah! A little side action here
I take advice from the folks here at Cnet all the time and trust them without a doubt! One of the things that's always been preached here is to only have one anti virus running on your computer...I wonder how three A/V would deal with one trojan
How it deals? Not well. It's very simple why!
Why most antivirus fail to deal with trojans is simply because these have to know about the trojan or the trojan's behavior.
Since this is a PC and we don't have a locked down App Store that is under draconian rules, it is possible to install a new trojan and get around the antivirus.
Again, the AV doesn't know about this one so it's let by.
And since this is a PC, we get to install anything we want.
Is that no longer the general recommendation?
If so, I will have to remove my post below and re-post.
So you're saying, install as many anti-virus scanners we wish?
a couple of posts at Piggybacking on the subject
Didn't answer the multi-AV issue.
I only addressed that today's AV must know the trojan by either action or signature so 1 or a dozen would not matter as none may find "Waldo."
My error and my apologies
I read your, 'we get to install anything we want" incorrectly.
I hope they get the message.
It's a PC. We can install anything we want. And that could be a trojan, malware or such.
Yep, only one AV is the general recommendation.
And about quarantine. If an infection is quarantined that would not prevent the same malware infecting the computer again. Sadly for these quarantine does not immunise, it just 'locks' that particular malware infected file away.
I would be looking for the source of this infection, web site, download, email attachment, infected CD disk or other external media, and so on.
I suggest deleting them (you won't delete anything from your computer) and installing a good antivirus to block them! And watch out on what website do you browse so you won't have anymore this problem.