Restoring quarantined objects

Kaspersky Security for Windows Server places probably infected objects into the Quarantine folder in encrypted form to shield the protected device against any possible harmful effects.

You can restore any object from Quarantine. This may be required in the following cases:

• After a Quarantine Scan using an updated database, the status of the object changes to False alarm or Disinfected.
• You consider the object harmless for the protected device and want to use it. If you do not want Kaspersky Security for Windows Server to isolate the object during the subsequent scans, you can exclude the object from processing in the Real-Time File Protection task and On-Demand Scan tasks. To do this, specify the object in the Exclude files (by filename) or Do not detect security setting in those tasks, or add it to the Trusted Zone.

When you restore objects you can select where the object being restored will be saved: the original location (default), special folder for restored objects on the protected device, or custom folder on the protected device where the Application Console is installed or on another device in the network.

You can specify the folder used for storing restored objects on the protected device. You can configure special security settings for it to be scanned. The path to this folder is set by the Quarantine settings.

Restoring objects from Quarantine may lead to protected device infection.

You can restore the object and save a copy of it in the Quarantine folder to use later, for example, to rescan the object after the database has been updated.

If a quarantined object was contained in a compound object (for example, in an archive), Kaspersky Security for Windows Server will not include the quarantined object into the compound object during the restoration, rather the quarantined object will be saved separately into a selected folder.

You can restore one or more objects.

To restore quarantined objects, perform the following steps:

1. In the Application Console tree, expand the Storages node.
2. Select the Quarantine child node.
3. Perform one of the following actions in the results pane of the Quarantine node:
   • To restore one object, select Restore from the context menu of the object that you want to restore.
   • To restore multiple objects, select the objects you wish to restore using the CTRL or SHIFT key, right-click one of the selected objects, and select Restore from the context menu.

   The Restore object window opens.

4. In the Restore object window, specify the folder in which the object being restored will be saved for each selected object.

   The name of the object is displayed in the Object field in the upper part of the window. If you selected several objects, the name of the first object in the list of selected objects will be displayed.

5. Perform one of the following steps:
   • To restore an object to its original location, select Restore to the source folder.
   • To restore an object to the folder specified as the location for restored objects in the settings, select Restore to the default folder for restoration.
   • To save an object to a different folder on the protected device where the Application Console is installed or to a shared folder, select Restore to folder on your local computer and then select the required folder or specify the path to it.
6. If you want to save a copy of the object in the Quarantine folder after the object is restored, clear the Remove objects from storage after they are restored check box.
7. To apply the specified restoration conditions to the rest of the selected objects, check the Apply to all selected objects box.

   All selected objects are restored and saved in the specified location. If you selected Restore to the source folder, each of the objects will be saved in its original location; if you selected Restore to the default folder for restoration or Restore to folder on your local computer, all objects will then be saved in one specified folder.

8. Click OK.

   Kaspersky Security for Windows Server will start restoring the first of the selected objects.

9. If an object with this name already exists in the specified location, the Object with this name already exists window opens.
   1. Select one of the following Kaspersky Security for Windows Server actions:
      • Replace, to replace the existing object with the restored object.
      • Rename, to save the restored object under a different name. In the entry field, enter the new restored object's filename and full path.
      • Rename by adding suffix, to rename the restored object by adding a suffix to its filename. Enter the suffix in the entry field.
   2. If you selected several objects to be restored, then select the Apply to all selected objects check box to apply the selected action (Replace or Rename) to the rest of the selected objects. If you selected Rename, the Apply to all selected objects check box will be unavailable.
   3. Click OK.

   The object will be restored. Information about the restoration operation will be recorded in the system audit log.

   If you did not select Apply to all selected objects in the Restore object window, the Restore object window may open again. Use this window to specify the location where the next selected object will be saved (see Step 4 of this procedure).