I would like to see the restore from a SONAR detection Quarantined item actually give the option to add the Exclusion of that object, when restored, to the editable Auto-Protect and Scan Exclusion lists instead of the non-user editable SONAR Exclusion list only.
Thanks for submitting your idea. Can you please explain why you think this feature would be helpful for you?
I don't want to speak for dbrisendine but my thoughts on this are simply this.
If a user enters an exclusion in SONAR when restoring something from quarantine it stands to reason that the user does not want this file quarantined again. That being said, the user would certainly not want a scan to quarantine that file so it makes sense to offer this option.
I totally understand that scanning is based on signatures and other things where SONAR is based on behavioral patterns but for user peace of mind if nothing else, I think this would be a useful feature.
I agree with dbrisendine.
Allen
We (the users) have wanted a way to manually remove a file entry that has been added to the SONAR Exclusion List for about 2 years now. The ability to manually edit the "Items to Exclude from Auto-Protect and SONAR detection" list would be the perfect way to accomplish this.
So, when the user restores the files that SONAR quarantines, there would be the options there for the Exclusion (which is editable) and the user can then remove this exclusion at their choice, without having to uninstall / install the product again.
Why would anyone want to do this? What if we mistakenly added a file that had been on our system for ages (thinking that this file is perfectly safe) and later found out it was really a will hidden trojan / backdoor type program that was waiting for years to be triggered.