Quarantine

Files can be added to the Quarantine by one of anti-virus components, e.g. Scanner.

User can rescan files in Quarantine via the Control Center or via the Quarantine Manager at the station.

1.Select the Anti-virus network item in the main menu, then click the name of the station or group in the hierarchical list. Select the Quarantine item in the General section of the control menu.

If you select one workstation, a table in the window displays objects in Quarantine at this station.

If you select more than one stations or one or more groups, the windows displays a set of tables with quarantined objects for each station.

Statistic on rescan of quarantined object that is given in the Information column, considers only rescans launched via the Control Center.

If more than one threat has been moved to quarantine, click the number of moved objects in the Information column to view the list of threats in the popup window.

If a quarantined object has the not infected status, it means that after moving to Quarantine of an object that has been detected as a threat, rescan has been performed and the object marked as safe.

Restoring objects from the Quarantine can be done only manually.

3.To filter files by time when they were quarantined, specify the certain time period relatively today in the drop-down list, or select the arbitrary date range on the toolbar. To select the arbitrary date range, enter required dates or click the calendar icons next to the date fields. To load data, click Refresh.

5.To filter Quarantine files, click

in the table header and specify the following filtering parameters:

•Search—specify the arbitrary string to search by all sections of the table. The table will contain only rows that correspond to the search results.

•Moved by component—select Dr.Web protection component which moved the files to Quarantine.

•Threat—select the name on detected threat according to the Doctor Web company classification.

•Original name—enter the original name of the object before moving to Quarantine.

•File size, B—using the slider, specify sizes range of detected objects in bytes.

Click Apply to display Quarantine files according to the specified parameters of the filter.

6.To manage files in Quarantine, set the flag for the corresponding file, group of files or for all files in the Quarantine (at the table header). On the toolbar, select one of the following actions:

Option	Description
Restore files → Restore files	Restore the original location of the files on a computer, i.e. restore the files to the folders where they had resided before were moved to the Quarantine.
Restore files → Restore files by parameters	In the opened window, specify the following settings: •If the one object is selected: ▫Restore file as—restore selected file from the Quarantine and place it to specified path with specified name. In the Restore file to the following path field, specify the full path at station by which the selected file will be restored. File name is obligatory. By default, the original location and file name is set (before moving). If necessary, you can change this parameter. ▫Restore files by threat type—restore from the Quarantine all files that have been classified with the same threat type as the selected file. The threat type is given in the Restore files containing the following threat field. ▫Restore files by path—restore from the Quarantine all files moved from the specific folder. In the Restore all files moved to the quarantine from the following folder field, specify the path to the folder at station. All files that have been moved to the quarantine from this folder will be restored. By default, the path to the folder where the selected file were resided is set. If necessary, you can change this parameter. •If several objects are selected: ▫Restore files—restore the original location of the files on a computer, i.e. restore the files to the folders where they had resided before were moved to the Quarantine. ▫Restore files by threat type—restore from the Quarantine all files that have been classified with the same threat type as the selected files. •In the Restore on the following objects list, select network nodes to restore the selected object from the Quarantine: either only for station on which the object was detected or for user groups selected in the list. •Add exceptions as personal settings of SpIDer Guard—add selected objects into the list of exclusions from the scan by SpIDer Guard component. At this, if the network nodes whose exclusions list will be changed are inheriting SpIDer Guard settings from their primary groups, when inheriting will be broken and personal settings will be set. •Add exceptions as personal settings of Dr.Web Scanner—add selected objects into the list of exclusions from the scan by Dr.Web Scanner component. At this, if the network nodes whose exclusions list will be changed are inheriting Dr.Web Scanner settings from their primary groups, when inheriting will be broken and personal settings will be set.
Remove files	Delete selected files from the Quarantine and from the system.
Scan files	Rescan selected in Quarantine files.
Export	Copy and save selected in Quarantine files. After moving suspicious files to the local Quarantine on user's computer, you can copy these files via the Control Center and save them via the web browser, e.g. to send files to Doctor Web virus laboratory.

7.Export data about the Quarantine state to a file in one of the following formats: