The infected objects detected in the process of network traffic scanning can be moved to the quarantine, a special directory (/var/lib/drweb/quarantine), where malicious objects are securely stored in isolation from the rest of the system.
By default, the option to move the infected objects is disabled, and all infected objects are removed. To enable it, set the value Yes for the anti-virus application option Quarantine enabled.
|
If a file moved to the quarantine has the same name as a file that is already in quarantine, a character-numeral index will be added to the name of a new file. For example, the file file.com will be renamed to file.com.drwebq.1524482643, where 1524482643 is the file creation timestamp. |
Managing quarantine
The quarantined files can be reviewed and processed only with root privileges. To remove files from the quarantine or save them on disk, use the quarantine command of the Dr.Web Ctl management utility.