ESET Online Help

Search English
Select the topic

Quarantine

Quarantine safely stores infected files. You should quarantine files if they cannot be cleaned, if it is not safe or advisable to delete them, or if they are falsely detected by ESET Endpoint Security. You can choose to quarantine any file, which is advisable if a file behaves suspiciously but is not detected by the antivirus scanner. You can submit quarantined files to the ESET Virus Lab for analysis.

Manage quarantined items via Terminal

Syntax: /Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar [OPTIONS]

Options - short form

Options - long form

Description

-i

--import

Import file to quarantine

-l

--list

Display list of files in quarantine

-r

--restore=id

Restore quarantined item identified by id to the path defined by --restore-path

-e

--restore-exclude=id

Restore quarantined item identified by id and marked by 'x' in the excludable column

-d

--delete=id

Delete quarantined item identified by id

 

--restore-path=path

New path to restore a quarantined item to

-h

--help

Show help

-v

--version

Show version information and quit


note

Restore

Restore is unavailable if the command is not executed as a privileged user.

Example

Delete a quarantined item with id "0123456789":

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -d 0123456789

or

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --delete=0123456789

Restore a quarantined item with id "9876543210" to the Download folder of the logged-in user and rename it to restoredFile.test :

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -r 9876543210 --restore-path=/Users/$USER/Desktop/restoredFile.test

or

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --restore=9876543210 --restore-path=/Users/$USER/Desktop/restoredFile.test

Restore a quarantined item with id "9876543210" which is marked "x" in the excludable column to the Download folder:

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar -e 9876543210 --restore-path=/Users/$USER/Downloads/restoredFile.test

or

/Applications/ESET\ Endpoint\ Security.app/Contents/MacOS/quar --restore-exclude=9876543210 --restore-path=/Users/$USER/Downloads/restoredFile.test

Restore file from quarantine via Terminal

1.List quarantined items.
/Applications/ESET\ Endpoint\ Antivirus.app/Contents/MacOS/quar -l

2.Look up the ID and name of the quarantined object you want to restore and run the following command:
/Applications/ESET\ Endpoint\ Antivirus.app/Contents/MacOS/quar --restore=ID_OF_OBJECT_TO_RESTORE --restore-