Dr. Bora,
Thank you for your prompt reply.
The opening sentence of your program's documentation states:
http://amf.mycity.rs/mcshield/Doc/MCShield_Help_EN.pdf"
MCShield is an antimalware tool designed to prevent infections transmitted via removable drives (USB flash drives, memory cards..., external hard drives)". Granted, later on (page 3) it notes the option to "
enable initial scan of all hard drives" --- without explicitly stating whether these are only the
external ones, as cited above, or the
internal ones as well... apparently, based on my experience, the latter case is what occurs. Since this option was pre-checked, the internal hard drives are scanned immediately, as soon as the program runs for the first time.
My interest in testing MCShield was for its
removable drive protection (to supplement an anti-virus program). I assume that's the case for most people trying it. So my first question is whether MCShield should even be considering
internal hard drives at all? And secondly, why is the hard-drive option
pre-selected by default [on the
initial run of the program]? I can imagine a less-experienced user panicking when s/he sees some files "deleted" from their main hard drive... and in a worst-case scenario, finding out their system doesn't boot-up again.
Isn't renaming of the suspicious/malware files [in-place, on their drives] sufficient to stop the malware from executing as intended? Is it really necessary to also quarantine it? Perhaps you might consider having your program distinguish between internal drives and removable drives, limiting the impact on
internal drives solely to renaming???
1. "
The files are whitelisted, detection should not occur again". Thank you! I had also added them to MY whitelist tab --- before seeing this response. (I doubt "double-whitelisting" can hurt anything.)
2. "
The items not showing in quarantine despite being there: obviously, a bug that needs to be fixed". I would consider this a very significant "bug"... I'm surprised that no one else (??) had reported it previously. By the way, the same thing [no files appearing under the quarantine tab] happened on another system (Dell PC, USB drive). This can be very scary to just about any user, no matter how experienced they might be.
3. "
the data in your recovery partition was not damaged in any way... " Thank you very much for this reassurance.