How do I restore a quarantined file

book

Article ID: 164739

calendar_today

Updated On:

Products

Symantec Products

Issue/Introduction

A file has been quarantined by Symantec Endpoint Protection Small Business Edition cloud (SEP SBE) and you need to restore it.

Resolution

The quarantined file can be restored back to its original location (server or workstation) by using the SEP SBE software.  

To perform this operation

  1. Log on to the machine in question
  2. Open the SEP SBE user interface
  3. Select View Quarantine
  4. Select the file needing to be restored
  5. Under Recommended Action, select Restore

 

The quarantined file can be restored back to its original location (workstation only) by using the SEP SBE management console.  

To perform this operation

  1. Log in to the SEP SBE management console.
  2. Navigate to the Computers tab
  3. Select the computer that you want to restore the file on
  4. In the Computer Profile page under Tasks on the right hand side you will see View Quarantine
  5. Click View Quarantine
  6. Tick the box next to the file you want to restore and click Restore

 

Note: The quarantine location on a server OS is located at this path C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\SRTSP. The quarantine location on a workstation OS is located at this path C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SRTSP.When a file is quarantined the SEP SBE agent encrypts the file so as not to be useable again if restored locally.