To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Quarantined file missing

JouniJ
JouniJ Posts: 1 Security Scout

I´m using F-secure Antivirus for Workstations 9.00 and on friday 10/26/2012 virusscanner gave generic alarm for variant.zusy.elzob. I suspect that this is an false positive alarm becouse i have checked file with numerous offline scanning tools not finding any sign of virus. Anyway is was going to unquarantine it and mark it for fsecure not to scan it in future. Today being monday 10/29/2012 i was going to unquarantine it but no there is no file to mark for unquarantine in Fsecure settings. Also the actual file is missing from folder. I have tried to use unquar tool but it doesnt find anything to unqarantine.

 

Can i save file somehow?

Comments

  • AndyT
    AndyT Posts: 7 Cyber Knight

    Hi JouniJ,

     

    Regarding your situation, please check the removal.log to confirm the file is on quarantine or is remove?

     

     

    Removal log:

    Window XP
    %alluser%\application data\f-secure\logs\fsav\users\removal.log

    Window 7
    %ProgramData%\F-Secure\logs\FSAV\Users\removal.log

     

     

    Please make sure the final action of the file is quarantine, it should in the following directory as below. The TAR folder is a hidden foler. Copy the whole Tar folder and submit to SAS portal.

     

    Kindly include the infection name on the ticket details.

     

     

    Quarantine folder:
    Window XP
    %alluser%\application data\f-secure\Quarantine\Repository\TAR
              
    Window 7
    %ProgramData%\F-Secure\Quarantine\Repository\TAR

     

     

    For more information on recovering quarantined items from the quarantine folder manually, please check the artile as below:

    http://www.f-secure.com/en/web/home_global/support/article/kba/15587

     

     

    Andy

     

  • Jayson
    Jayson Posts: 106 Firewall Master

    Hi,

    Anti-virus for Workstation is our Corporate product. I moved this post to End-point Security board.

    Thanks.


    Best Regards,
    Jayson

This discussion has been closed.

Categories