Restoring Encrypted Files Parent topic

To prevent infected from being opened, OfficeScan encrypts the file during the following instances:
  • Before quarantining a file
  • When backing up a file before cleaning it
OfficeScan provides a tool that decrypts and then restores the file in case you need to retrieve information from it. OfficeScan can decrypt and restore the following files:

Files that OfficeScan can Decrypt and Restore

File
Description
Quarantined files on the client computer
These files are found in the <Client installation folder>\SUSPECT\Backup folder and are automatically purged after 7 days. These files are also uploaded to the designated quarantine directory on the OfficeScan server.
Quarantined files on the designated quarantine directory
By default, this directory is located on the OfficeScan server computer. For details, see Quarantine Directory.
Backed up encrypted files
These are the backup of infected files that OfficeScan was able to clean. These files are found in the <Client installation folder>\Backup folder. To restore these files, users need to move them to the <Client installation folder>\SUSPECT\Backup folder.
OfficeScan only backs up and encrypts files before cleaning if you select Backup files before cleaning in Networked Computers → Client Management > Settings → Scan Settings → {Scan Type} → Action tab.
WARNING
WARNING
Restoring an infected file may spread the virus/malware to other files and computers. Before restoring the file, isolate the infected computer and move important files on this computer to a backup location.
Related information