Microsoft Security Essentials: Does "allow program" allow the infected program, or all instances of the infecting program?

  • Thread starter Thread starter Phil Goetz
  • Start date Start date
P

Phil Goetz

I've searched and been unable to find an answer to this question, because Microsoft is unaware that their instructions are dangerously ambiguous.


When Microsoft Security Essentials gives you the options to Remove, Quarantine, or Allow "a program", does "Allow" mean allow the infected program, or allow the virus?


I've always assumed it meant "allow the file on your computer that has been flagged as a virus, but continue detecting other instances of that virus." But now I have 3 files all flagged with Trojan:Win32/Tilken.B!cl, and MSE only allows me to pick one action (Remove, Quarantine, Allow) for all three!


Does that mean that "Allow" means "allow all instances of Trojan:Win32/Tilken.B!cl, now and forever", since you get to choose only one action?


If so, that's disastrous! My standard action for all viruses is to choose "Allow" and then move the infected file into my own quarantine directory, which I use to test virus scanners. If "Allow" means "Allow all instances of this virus", then my computer has been mostly unprotected by MSE for at least 8 years!


ADDED: I've already gotten 2 answers, but neither understood the question. Let me try to simplify it:


If "Allow" means "Allow the file flagged as having a virus", then if you choose "Allow", MSE will still detect other instances of infection by that virus in the future.


If "Allow" means "Allow all instances of the detected virus" , then if you choose "Allow", MSE will not report other instances of infection by that virus in the future.


Which is it?


The file with the virus is a program, and the virus is also a program, so saying that 'Allow' "allows the program" does not answer the question.

Continue reading...
 
Back
Top