Quarantine

The infected attachments can be moved to Quarantine – a special directory (/var/lib/drweb/quarantine,), where the malicious objects are isolated from the rest of the system.

By default, the quarantine is disabled and all infected ojects are deleted. To enable it, set the value Yes for the Quarantine enabled anti-virus parameter.

If a file moved to quarantine has the same name as a file that is already in quarantine, an index will be added to the name of the new file. For example, the file file.com will be renamed to file.com.drwebq.1524482643, where 1524482643 is the file creation timestamp.

Manage Quarantine

The quarantined files can be reviewed and processed only by the superuser (root). The files can be removed from quarantine or saved on the disk.