After antivirus software detects a virus, what is the most common action it takes next?

Antivirus software commonly quarantines a detected virus and prevents it from being opened as a precautionary measure. Quarantining is a critical step because it isolates the infected files, ensuring that the virus cannot spread or cause further damage to the system. This action allows the user or the system administrator to review the situation safely without the risk of accidental activation of the malware.

Quarantining gives the user flexibility to decide the next steps, be it deletion or recovery if the file is determined to be safe. This method is standard practice, as it balances immediate safety with the option to inspect or recover potentially critical files that were falsely flagged.

While other actions might follow after infection detection, such as immediate deletion or user prompts, quarantine is the most common first step due to its emphasis on caution and assessment, minimizing overall risk.