Quarantine
The primary function of the quarantine is to store infected files safely. Files should be quarantined if they cannot be cleaned, or if it is not safe or advisable to delete them, or if falsely detected by ESET Endpoint Antivirus for Linux. You can choose to quarantine any file, especially if a file behaves suspiciously but is not detected by the antivirus scanner.
Path to quarantine directory: /var/opt/eset/eea/cache/quarantine/
The quarantine directory is created the first time there is an item to be quarantined.
Manage quarantined items via Terminal
Syntax: /opt/eset/eea/bin/quar [OPTIONS]
Options - short form |
Options - long form |
Description |
|---|---|---|
-i |
--import |
Import file to quarantine |
-l |
--list |
Display list of files in quarantine |
-r |
--restore=id |
Restore quarantined item identified by id to path defined by --restore-path |
-e |
--restore-exclude=id |
Restore quarantined item identified by id and marked by 'x' in the excludable column |
-d |
--delete=id |
Delete quarantined item identified by id |
-f |
--follow |
Wait for new items and append them to the output |
|
--restore-path=path |
Path to restore a quarantined item to |
-h |
--help |
Show help and quit. |
-v |
--version |
Show version information and quit |
|
Restore Restore is not available if the command is not executed as a privileged user. |
Example
Delete a quarantined item with id "09876543210":
/opt/eset/eea/bin/quar -d 09876543210 |
or
/opt/eset/eea/bin/quar --delete=09876543210 |
Restore a quarantined item with id "9876543210" to the Download folder of the logged in user and rename it to restoredFile.test :
/opt/eset/eea/bin/quar -r 9876543210 --restore-path=/home/$USER/Download/restoredFile.test |
or
/opt/eset/eea/bin/quar --restore=9876543210 --restore-path=/home/$USER/Download/restoredFile.test |
Restore a quarantined item with id "9876543210" which is marked "x" in the excludable column to the Download folder:
/opt/eset/eea/bin/quar -e 9876543210 --restore-path=/home/$USER/Download/ |
or
/opt/eset/eea/bin/quar --restore-exclude=9876543210 --restore-path=/home/$USER/Download/ |
Restore file from quarantine via Terminal
1.List quarantined items.
/opt/eset/eea/bin/quar -l
2.Look up the ID and name of the quarantined object you want to restore and run the following command:
/opt/eset/eea/bin/quar --restore=ID_OF_OBJECT_TO_RESTORE --restore-path=/final/path/of/restored/file