Quarantine
Quarantine safely stores infected files. You should quarantine files if they cannot be cleaned, if it is not safe or advisable to delete them, or if they are falsely detected by ESET Endpoint Security. You can choose to quarantine any file, which is advisable if a file behaves suspiciously but is not detected by the antivirus scanner. You can submit quarantined files to the ESET Virus Lab for analysis.
Manage quarantined items via Terminal
Syntax: /Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar [OPTIONS]
Options - short form |
Options - long form |
Description |
|---|---|---|
-i |
--import |
Import file to quarantine |
-l |
--list |
Display list of files in quarantine |
-r |
--restore=id |
Restore quarantined item identified by id to the path defined by --restore-path |
-e |
--restore-exclude=id |
Restore quarantined item identified by id and marked by 'x' in the excludable column |
-d |
--delete=id |
Delete quarantined item identified by id |
|
--restore-path=path |
New path to restore a quarantined item to |
-h |
--help |
Show help |
-v |
--version |
Show version information and quit |
|
Restore Restore is unavailable if the command is not executed as a privileged user. |
Example
Delete a quarantined item with id "0123456789":
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -d 0123456789 |
or
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --delete=0123456789 |
Restore a quarantined item with id "9876543210" to the Download folder of the logged-in user and rename it to restoredFile.test :
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -r 9876543210 --restore-path=/Users/$USER/Desktop/restoredFile.test |
or
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --restore=9876543210 --restore-path=/Users/$USER/Desktop/restoredFile.test |
Restore a quarantined item with id "9876543210" which is marked "x" in the excludable column to the Download folder:
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -e 9876543210 --restore-path=/Users/$USER/Downloads/restoredFile.test |
or
/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --restore-exclude=9876543210 --restore-path=/Users/$USER/Downloads/restoredFile.test |
Restore file from quarantine via Terminal
1.List quarantined items.
/Applications/ESET\ Endpoint\ Antivirus.app/Contents/MacOS/quar -l
2.Look up the ID and name of the quarantined object you want to restore and run the following command:
/Applications/ESET\ Endpoint\ Antivirus.app/Contents/MacOS/quar --restore=ID_OF_OBJECT_TO_RESTORE --restore-