Quarantine and Backup

Kaspersky anti-virus applications installed on client devices may place files in Quarantine or Backup during device scan.

Quarantine is a special repository for storing files that are probably infected with viruses and files that cannot be disinfected at the time when they are detected.

Backup is designed for storing backup copies of files that have been deleted or modified during the disinfection process.

Kaspersky Security Center creates a summarized list of files placed in Quarantine or Backup by Kaspersky applications on the devices. Network Agents on client devices transmit information about the files in Quarantine and Backup to the Administration Server. You can use Administration Console to view the properties of files stored in repositories on devices, run virus scans of those repositories, and delete files from them. The icons of the file statuses are described in the appendix.

Operations with Quarantine and Backup are supported for versions 6.0 or later of Kaspersky Anti-Virus for Windows Workstations and Kaspersky Anti-Virus for Windows Servers, as well as for Kaspersky Endpoint Security 10 for Windows, or later versions.

Kaspersky Security Center does not copy files from repositories to Administration Server. All files are stored in repositories on the devices. You can restore a file only on the device with the anti-virus application, which placed that file in the repository.

Enabling remote management for files in the repositories

By default, you cannot manage files placed in repositories on client devices.

To enable remote management of files stored in repositories on client devices:

1. In the console tree, select an administration group, for which you want to enable remote management for files in the repository.
2. In the group workspace, open the Policies tab.
3. On the Policies tab, select the policy of the security application that has placed the files in the repositories on the devices.
4. In the policy settings window in the Data transfer to Administration Server group of settings, select the check boxes corresponding to the repositories for which you want to enable the remote management.

   The location of the Data transfer to Administration Server settings group in the policy properties window and the names of check boxes depend on the currently used security application.

Viewing properties of a file placed in repository

To view properties of a file in Quarantine or Backup:

1. In the console tree, select the Repositories folder, the Quarantine or Backup subfolder.
2. In the workspace of the Quarantine (Backup) folder, select a file whose properties you want to view.
3. By selecting Properties in the context menu of the file.

Deleting files from repositories

To delete a file from Quarantine or Backup:

1. In the console tree, in the Repositories folder, select the Quarantine or Backup subfolder.
2. In the workspace of the Quarantine (or Backup) folder select the files that you want to delete by using the Shift and Ctrl keys.
3. Delete the files in one of the following ways:
   • By selecting Delete in the context menu of the files.
   • By clicking the Delete objects (Delete object) if you want to delete one file) link in the information box for the selected files.

The security applications that placed files in repositories on client devices will delete the same files from those repositories.

Restoring files from repositories

To restore a file from Quarantine or Backup:

1. In the console tree, select the Repositories folder, the Quarantine or Backup subfolder.
2. In the workspace of the Quarantine (Backup) folder select the files that you want to restore by using the Shift and Ctrl keys.
3. Start restoration of the files in one of the following ways:
   • By selecting Restore in the context menu of the files.
   • By clicking the Restore link in the information box for the selected files.

The security applications that placed files in repositories on client devices will restore the same files to their original folders.

Saving a file from repositories to disk

Kaspersky Security Center allows you to save on a disk copies of files that a security application placed in Quarantine or Backup on a client device. Files are copied to the device with Kaspersky Security Center installed, to the specified folder.

To save a copy of file from Quarantine or Backup to a hard drive:

1. In the console tree, select the Repositories folder, the Quarantine or Backup subfolder.
2. In the workspace of the Quarantine (Backup) folder, select a file that you want to copy to the hard drive.
3. Start copying in one of the following ways:
   • By selecting Save to Disk in the context menu of the file.
   • By clicking the Save to Disk link in the information box for the selected file.

The security application that placed the file in Quarantine on the client device will save a copy of that file to the specified folder.

Scanning files in Quarantine

To scan quarantined files:

1. In the console tree, select the Repositories folder, the Quarantine subfolder.
2. In the workspace of the Quarantine folder, select the files that you want to scan by using the Shift and Ctrl keys.
3. Start the file scan in one of the following ways:
   • By selecting Scan in the context menu of the file.
   • By clicking the Scan link in the information box for the selected files.

The application runs the on-demand scan task for security applications that have placed the selected files in Quarantine on the devices where those files are stored.