La sessione di domande e risposte di oggi ci viene fornita per gentile concessione di SuperUser, una suddivisione di Stack Exchange, un raggruppamento di domande e risposte basato sulla comunità.
Foto per gentile concessione di Connor Tarter (Flickr).
La domanda
Il lettore SuperUser Sardar_Usama vuole sapere perché il software antivirus mette in quarantena virus e malware invece di eliminarli ?:
Why does antivirus software quarantine viruses and malware instead of completely deleting them? I think it would be better to make sure your computer is safe by completely getting rid of them. How can I manually remove quarantined items?
Perché il software antivirus mette in quarantena virus e malware anziché eliminarli?
La risposta
I collaboratori di SuperUser Julie Pelletier e Mokubai hanno la risposta per noi. Primo, Julie Pelletier:
Antimalware applications provide a quarantine option, which is often on by default for two reasons:
- Keeping a backup of the items identified as threatening in case of a false positive. Although not very common, I have seen cases of false positives on many different legitimate application files and drivers.
- Having the items in quarantine may allow for them to be better (further) investigated. The fact that a particular virus or malware matches a known signature does not mean that it is exactly the same, but may actually have other unique characteristics.
Seguito dalla risposta di Mokubai:
If a virus or malware has embedded itself into a file you actually want, such as a Word document or similar, then outright deletion may be the worst option from the user’s perspective. Quarantine at least gives you a chance, however risky, to get the actual file contents you need back.
Hai qualcosa da aggiungere alla spiegazione? Audio disattivato nei commenti. Vuoi leggere più risposte dagli altri utenti di Stack Exchange esperti di tecnologia? Controlla la discussione completa qui.
