A sessão de perguntas e respostas de hoje nos é oferecida por cortesia do SuperUser, uma subdivisão do Stack Exchange, um agrupamento de sites de perguntas e respostas conduzido pela comunidade.
Foto cedida por Connor Tarter (Flickr).
A questão
Leitor de SuperUser Sardar_Usama quer saber por que o software antivírus coloca em quarentena vírus e malware em vez de excluí-los ?:
Why does antivirus software quarantine viruses and malware instead of completely deleting them? I think it would be better to make sure your computer is safe by completely getting rid of them. How can I manually remove quarantined items?
Por que o software antivírus coloca em quarentena vírus e malwares em vez de excluí-los?
A resposta
Os colaboradores do SuperUser, Julie Pelletier e Mokubai, têm a resposta para nós. Primeiro, Julie Pelletier:
Antimalware applications provide a quarantine option, which is often on by default for two reasons:
- Keeping a backup of the items identified as threatening in case of a false positive. Although not very common, I have seen cases of false positives on many different legitimate application files and drivers.
- Having the items in quarantine may allow for them to be better (further) investigated. The fact that a particular virus or malware matches a known signature does not mean that it is exactly the same, but may actually have other unique characteristics.
Seguido pela resposta de Mokubai:
If a virus or malware has embedded itself into a file you actually want, such as a Word document or similar, then outright deletion may be the worst option from the user’s perspective. Quarantine at least gives you a chance, however risky, to get the actual file contents you need back.
Tem algo a acrescentar à explicação? Som desligado nos comentários. Quer ler mais respostas de outros usuários do Stack Exchange com experiência em tecnologia? Confira o tópico de discussão completo aqui.
