Quarantined file missing

I´m using F-secure Antivirus for Workstations 9.00 and on friday 10/26/2012 virusscanner gave generic alarm for variant.zusy.elzob. I suspect that this is an false positive alarm becouse i have checked file with numerous offline scanning tools not finding any sign of virus. Anyway is was going to unquarantine it and mark it for fsecure not to scan it in future. Today being monday 10/29/2012 i was going to unquarantine it but no there is no file to mark for unquarantine in Fsecure settings. Also the actual file is missing from folder. I have tried to use unquar tool but it doesnt find anything to unqarantine.

Can i save file somehow?

Find more posts tagged with

Comments

Jayson

Hi,

Anti-virus for Workstation is our Corporate product. I moved this post to End-point Security board.

Thanks.

Best Regards,
Jayson

AndyT

Hi JouniJ,

Regarding your situation, please check the removal.log to confirm the file is on quarantine or is remove?

Removal log:

Window XP
%alluser%\application data\f-secure\logs\fsav\users\removal.log

Window 7
%ProgramData%\F-Secure\logs\FSAV\Users\removal.log

Please make sure the final action of the file is quarantine, it should in the following directory as below. The TAR folder is a hidden foler. Copy the whole Tar folder and submit to SAS portal.

Kindly include the infection name on the ticket details.

Quarantine folder:
Window XP
%alluser%\application data\f-secure\Quarantine\Repository\TAR

Window 7
%ProgramData%\F-Secure\Quarantine\Repository\TAR

For more information on recovering quarantined items from the quarantine folder manually, please check the artile as below:

http://www.f-secure.com/en/web/home_global/support/article/kba/15587

Andy