Hi all,
I currently have my update tasks set to "Rescan Quarantine" after the update based on the logic that a previously quarantined file may be successfully disinfected following the new update.
However, thanks to the luxury of large disk space and lots of spare bandwidth, I check for updates every hour. As a result I'm getting notified of the "possibly infected object" numerous times a day, every time there is an update.
So far the only things caught by KAV have been genuine phishing attempts and viruses.
What do other network administrators have set? Do you just let things hit the quarantine folder and get automatically deleted after a certain period if a user hasn't piped up saying they are missing something? Or do you use the Rescan Quarantine setting? If so, how do you manage the reocrruring notifications?
Many thanks
Andrew