ESET Online Help

Search English
Select the topic

Quarantine

The primary function of the quarantine is to store infected files safely. Files should be quarantined if they cannot be cleaned, or if it is not safe or advisable to delete them, or if falsely detected by ESET Endpoint Antivirus for Linux. You can choose to quarantine any file, especially if a file behaves suspiciously but is not detected by the antivirus scanner.

Path to quarantine directory: /var/opt/eset/eea/cache/quarantine/

The quarantine directory is created the first time there is an item to be quarantined.

Manage quarantined items via Terminal

Syntax: /opt/eset/eea/bin/quar [OPTIONS]

Options - short form

Options - long form

Description

-i

--import

Import file to quarantine

-l

--list

Display list of files in quarantine

-r

--restore=id

Restore quarantined item identified by id to path defined by --restore-path

-e

--restore-exclude=id

Restore quarantined item identified by id and marked by 'x' in the excludable column

-d

--delete=id

Delete quarantined item identified by id

 

--restore-path=path

Path to restore a quarantined item to

-h

--help

Show help and quit.

-v

--version

Show version information and quit

note

Restore

Restore is not available if the command is not executed as a privileged user.

Example

Delete a quarantined item with id "09876543210":

or

 

Restore a quarantined item with id "9876543210" to the Download folder of the logged in user and rename it to restoredFile.test :

or

 

Restore a quarantined item with id "9876543210" which is marked "x" in the excludable column to the Download folder:

or

Restore file from quarantine via Terminal

1.List quarantined items:

2.Look up the ID and name of the quarantined object you want to restore and run the following command: