Your first scan, without dumping everything into quarantine

The steps, in order

1. 1

   Step 1

   Open the product and go to Scan. Pick a folder with executables, not the whole disk: a first full scan is slow and produces triage noise.

2. 2

   Step 2

   Leave deep off for the first run. The fast engines (hash, YARA prefilter, signatures) catch most known samples; deep adds macro analysis and the more expensive rules.

3. 3

   Step 3

   Expand the rows: you see SHA-256, MD5, MIME and the per-engine table. That is where the exact rule that triggered the verdict appears.

4. 4

   Step 4

   If the verdict is “suspicious”, not “malicious”, there is no need to isolate. Check the rule, check the file signature and decide with information rather than fear.