4 ms·
In short, "antivirus doing what antivirus has always done". Always set your AV to quarantine rather than blindly deleting data with potential infections, and re
by TheRealPomax 3y ago
In short, "antivirus doing what antivirus has always done". Always set your AV to quarantine rather than blindly deleting data with potential infections, and review what it does, when it does it, so you can say "no, you will put this back" and you report the false positive (if your AV solution doesn't auto-submit that because it can, and it should)
- ferbivore 3y agoIt's been a while since I had to deal with Defender but IIRC the "put this back" option doesn't really work. It would regularly forget exceptions and quarantine binaries again.
- alyandon 3y agoThat's the problem with Windows Defender - Microsoft has basically removed the ability for a normal user to configure it to quarantine instead of auto-remediate (delete). After I caught Windows Defender uploading my places.sqlite in my FF profile "for analysis", I permanently disabled automatic sample submission, auto-remediation, etc via group policies. I still won't use any other AV though because they are generally even worse about making decisions without user input and don't respect group policies at all unless you are an actual enterprise customer.