RESTORE. Restoring files from Quarantine

Restore a file from Quarantine to a special folder on the computer. Then you must manually move the file to the destination folder. The Quarantine is a special local storage on the computer where files that are infected by viruses or non-disinfectable files are moved to. Quarantined files are stored in an encrypted state and do not threaten the security of the device. Kaspersky Endpoint Security uses Quarantine only when working with Kaspersky Sandbox and Kaspersky Endpoint Detection and Response Optimum solutions. In other cases Kaspersky Endpoint Security places the relevant file in Backup. For details on managing Quarantine as part of solutions, see Kaspersky Sandbox and Kaspersky Endpoint Detection and Response Optimum Help Guides.

To execute this command, Password protection must be enabled. The user must have the Restore from Backup permission.

The object is quarantined under the system account (SYSTEM).

Command syntax

RESTORE [/REPLACE] <file name> /login=<user name> /password=<password>

Command return values:

• -1 means the command is not supported by the version of Kaspersky Endpoint Agent that is installed on the device.
• 0 means the command was executed successfully.
• 1 means a mandatory argument was not passed to the command.
• 2 means a general error occurred.
• 4 means there was a syntax error.