When D+ is in Clean PC Mode, and a new executable is downloaded, it appears in My Pending Files. In this scenario, what is the difference between deleting the entry in My Pending Files versus moving the entry to My Own Safe Files?
Here is my understanding so far:
- If I already scanned the installer at virustotal.com, moving the entry to My Own Safe Files prevents false detection by CAV.
- Moving the entry to My Own Safe Files increases the size of the CIS database and slows down the PC slightly.
- In both cases, a rule is added to the Computer Security Policy when the new executable first executes.
Help and comments please!