On July 4, 2015, the NIS heuristics screwed up and quarantined 225 of our files. From this we found a few problems with NIS, and we have a few suggestions to make NIS even better. This was in Version 22.5.2.15.
1. I was able to unquarantine a lot of the files, but NIS was not able to properly unquarantine each file that NIS removed from a .ZIP or compressed .EXE file. NIS put the file it removed back into the same folder that the .ZIP or compressed .EXE file was in, but it didn't put the file back inside the .ZIP or compressed .EXE file, where it got it from. For folders with a number of .ZIP or compressed .EXE files, this meant that some of the .ZIP or compressed .EXE files were missing files, and these files were now just loose in the main folder (unassociated with their .ZIP or compressed .EXE file). Unquarantining should restore the .ZIP or compressed .EXE files back to their original condition. One possible solution is to have NIS make a copy of the .ZIP or compressed .EXE file "before" it removes the file it thinks is bad, and store this .ZIP or compressed .EXE file in it's quarantine area, too, so it can be restored fully.
2. Also, the "exported report" failed to say what file was deleted, when it extracted a file from a .ZIP or compressed .EXE file. It didn't even say which .ZIP or compressed .EXE file it removed a file out of. NIS only had this information inside each dialog box (I had to go into each one individually). It would be a great improvement if the exported report had all the information. We can always delete extra info if we don't need it.
3. Also, one report was just text rather than comma delimited. I had to manually format it in a spreadsheet to analyze it. Another report "was" comma delimited, so this shouldn't be much work to change this. A choice of comma delimited format for "every" report would be a great improvement for NIS.
Thank you.