Jump to content

How long does SAS retain quarantined files?

Recommended Posts

I noticed today that I have some quarantined spyware dated 6/28/09. It got me to wondering if SAS had a maximum setting for retention of quarantined files (e.g. 30, 60, 90, etc. days). IOW, a setting that would make it unnecessary to periodically clean out the quarantine chest manually. If it does, I can't find it, so please let me know how to access it. If it doesn't, it would make a nice addition to the next version.

Share this post

Link to post
Share on other sites

When any program detects a malware on one of my systems, I always research the file on Google, and upload the file(s) to a online scanner such as http://www.virustotal.com to verify a positive detection (using a sandbox or VM for safety).

With that said, if you're sure the detection is valid (as in not a false positive), quarantined files can generally be deleted after 30 days, providing no system abnormalities occur.

For this reason, I don't feel that any automated quarantined file deletion process should be implemented by SAS, or other scanner program.

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now