|
Quarantine Content
Files can be added to the quarantine by one of anti-virus components, e.g. Scanner.
User can rescan files in quarantine via the Control Center or via the Quarantine Manager on the station.
To view and manage quarantine via the Control Center
1.Select the Anti-virus network item in the main menu, then click the name of the station or group in the hierarchical list. Select the Quarantine item in the General section of the control menu.
2.A new window with table that contains quarantine current state opens.
If you select one workstation, a table in the window displays objects in quarantine at this station.
If you select more than one stations or one or more groups, the windows displays a set of tables with quarantined objects for each station.
|
Statistic on rescan of quarantined object that is given in the Information column, considers only rescans launched via the Control Center.
If more than one threat has been moved to quarantine, click the number of moved objects in the Information column to view the list of threats in the popup window.
If a quarantined object has the not infected status, it means that after moving to quarantine of an object that has been detected as a threat, rescan has been performed and the object marked as safe.
Restoring objects from the quarantine can be done only manually.
|
3.To filter files by time when they were quarantined, specify the certain time period relatively today in the drop-down list, or select the arbitrary date range on the toolbar. To select the arbitrary date range, enter required dates or click the calendar icons next to the date fields. To load data, click Refresh.
4.To change the table view, click the  icon in the table header:
•Specify rows display settings (most relevant for long strings).
•Select the columns to display in the table.
5.To filter quarantine files, click  in the table header and specify the following filtering parameters:
•Search—specify the arbitrary string to search by all sections of the table. The table will contain only rows that correspond to the search results.
•Moved by component—select Dr.Web protection component which moved the files to quarantine.
•Threat—select the name on detected threat according to the Doctor Web company classification.
•Original name—enter the original name of the object before moving to quarantine.
•File size, B—using the slider, specify sizes range of detected objects in bytes.
Click Apply to display quarantine files according to the specified parameters of the filter.
Click Default to reset all filtering parameters into default values.
6.To manage files in quarantine, set the flag for the corresponding file, group of files or for all files in the quarantine (at the table header). On the toolbar, select one of the following actions:
|
|
 Delete files
|
|
 Delete selected files
|
|
Delete selected files from the quarantine and from the system.
|
|
 Delete all files
|
|
Delete from the quarantine and from the system all files that match selected filter parameters. i.e. all files displayed in the quarantine window.
|
|
 Export
|
|
Copy and save selected file.
Once the suspicious files are moved to local quarantine on user's computer, you can copy and save these files via the Control Center. For instance, to send the files to Doctor Web virus laboratory for analysis.
When exported, a file is placed into archive. The archive's name corresponds with a hash of the exported file. Besides the exported object, the archive contains a CSV file with general information about the object. By default, the archive is protected with a password virus.
|
|
 Restore files
|
Use the restore option only if you are sure that objects are harmless.
|
|
|
 Restore selected files
|
|
Restore the original location of the files selected in the window, i.e. restore the files on stations to the folders where they had resided before were moved to the quarantine.
|
|
 Restore files by parameters
|
|
In the opened window, specify the following settings:
•If the one object is selected:
▫Restore file as—restore selected file from the quarantine and place it to specified path with specified name.
In the Restore file to the following path field, specify the full path on the station by which the selected file will be restored. File name is obligatory. By default, the original location and file name is set (before moving). If necessary, you can change this parameter.
▫Restore files by threat type—restore from the quarantine all files that have been classified with the same threat type as the selected file. The threat type is given in the Restore files containing the following threat field.
▫Restore files by path—restore from the quarantine all files moved from the specific folder.
In the Restore all files moved to the quarantine from the following folder field, specify the path to the folder at station. All files that have been moved to the quarantine from this folder will be restored. By default, the path to the folder where the selected file were resided is set. If necessary, you can change this parameter.
•If several objects are selected:
▫Restore files—restore the original location of the files on a computer, i.e. restore the files to the folders where they had resided before were moved to the quarantine.
▫Restore files by threat type—restore from the quarantine all files that have been classified with the same threat type as the selected files.
•In the Restore on the following objects list, select network nodes to restore the selected object from the quarantine: either only for station on which the object was detected or for user groups selected in the list.
•Add exceptions as personal settings of SpIDer Guard—add selected objects into the list of exclusions from the scan by SpIDer Guard component. At this, if the network nodes whose exclusions list will be changed are inheriting SpIDer Guard settings from their primary groups, when inheriting will be broken and personal settings will be set.
•Add exceptions as personal settings of Dr.Web Scanner—add selected objects into the list of exclusions from the scan by Dr.Web Scanner component. At this, if the network nodes whose exclusions list will be changed are inheriting Dr.Web Scanner settings from their primary groups, when inheriting will be broken and personal settings will be set. |
|
|
Restore all files
|
|
Restore the original location of all files in the window, i.e. restore the files on stations to the folders where they had resided before were moved to the quarantine.
|
|
 Scan files
|
|
Scan selected files
|
|
Rescan selected in quarantine files.
|
|
Scan all files
|
|
Rescan all files in the quarantine window.
|
|
|
The request for restoring and rescanning will be sent to offline stations only after stations connect to Dr.Web Server.
|
7.Export data about the quarantine state to a file in one of the following formats:
 Save data in CSV file,
 Save data in HTML file,
 Save data in XML file,
 Save data in PDF file.
|