Restoring Quarantined Files

You can restore files that OfficeScan quarantined if you believe that the detection was inaccurate. The Central Quarantine Restore feature allows you to search for files in the quarantine directory and perform SHA1 verification checking to ensure that the files you want to restore have not been modified in any way.

  1. Go to Agents > Agent Management.
  2. In the agent tree, select a domain or select any agent.
  3. Click Tasks > Central Quarantine Restore.

    The Central Quarantine Restore Criteria screen appears.

  4. Type the name of the data you want to restore in the Infected file/object field.
  5. Optionally specify the time period, security threat name, and file path of the data.
  6. Click Search.

    The Central Quarantine Restore screen appears displaying the results of the search.

  7. Select Add restored file to the domain-level exclusion list to ensure that all OfficeScan agents in the domain(s) where the files are restored add the file to the scan exclusion list.

    This ensures that OfficeScan does not detect the file as a threat during future scans.

  8. Optionally type the SHA1 value of the file for verification purposes.
  9. Select the files to restore from the list and click Restore.
    Tip:

    To view the individual OfficeScan agents that restore the file, click the link in the Endpoints column.

  10. Click Close in the confirmation dialog.

    To verify that OfficeScan successfully restored the quarantined file, see Viewing Central Quarantine Restore Logs.

Parent topic: Settings Common to All Scan Types