RESTORE. Restoring files from Quarantine

You can restore a file from Quarantine to its original folder. If the destination folder has been deleted, the application places the file to a special folder on the computer. Then you must manually move the file to the destination folder. Quarantine is a special local storage on the computer. The user can quarantine files that the user considers dangerous for the computer. Quarantined files are stored in an encrypted state and do not threaten the security of the device. Kaspersky Endpoint Security uses Quarantine only when working with Kaspersky Sandbox and Kaspersky Endpoint Detection and Response solutions. In other cases Kaspersky Endpoint Security places the relevant file in Backup. For details on managing Quarantine as part of solutions, please refer to the Kaspersky Sandbox Help, Kaspersky Endpoint Detection and Response Optimum Help, and Kaspersky Endpoint Detection and Response Expert Help.

To execute this command, Password protection must be enabled. The user must have the Restore from Backup permission.

The object is quarantined under the system account (SYSTEM).

Command syntax

avp.com RESTORE [/REPLACE] <file name> /login=<user name> /password=<password>

Advanced settings

 

/REPLACE

Overwrite an existing file.

<file name>

The name of the file to be restored.

Authentication

 

/login=<user name> /password=<password>

User account credentials with the required Password protection permissions.

Example:

avp.com RESTORE /REPLACE true_file.txt /login=KLAdmin /password=!Password1

Command return values:

Page top