Quarantine

The Quarantine is a list of files which the antivirus agent detects as infected. These files may contain viruses and other threats or their varieties.

When GFI OneGuard Antivirus agent quarantines a file, it does not copy the file, but moves it. The application deletes the file from the hard drive or email message and saves the file in a special data storage. Files in Quarantine are encrypted and do not pose a threat.

GFI OneGuard Antivirus agent detects and quarantines a probably infected file during a virus scan. You can also manually move a file that you suspect of containing viruses or other malware in Quarantine.

By default, the Antivirus agent permanently deletes files from Quarantine after a number of days, as configured by your network administrator (default is 30 days).

GFI OneGuard Antivirus Quarantine area

GFI OneGuard Antivirus agent places files in Quarantine in the following cases:

• File code resembles a known but partly modified malicious program, or has a malware-like structure, and is not listed in the Antivirus agent's database. In this case, the file is placed in Quarantine after heuristic analysis by File Anti-Virus and Mail Anti-Virus, or during a virus scan. Heuristic analysis rarely causes false positives.
• The sequence of operations that a file performs is dangerous. In this case, the file is placed in Quarantine after the System Watcher component has analyzed its behavior.

The following file operations are available when managing Quarantine:

Action	Description
View quarantined files	The list of quarantined files is shown in the Quarantine tab.
Manually moving a file to Quarantine	You can manually quarantine a file that you suspect of containing viruses or other threats. To do this, click Move file to Quarantine and select the file to quarantine. Click Open. The file is now moved from its original folder to Quarantine and access to this file from disk is blocked.
Re-scan quarantined files	Right-click a quarantined file and click Re-scan to scan it using the current version of the Antivirus agent databases and modules. A notification shows the re-scan results and the number of detected threats.
Restore files to their original folders	To restore ALL quarantined files to their original folders, right-click anywhere in the table on the Quarantine tab to display the context menu and select Restore all. To restore one or more quarantined files, select one or more files to restore and click Restore. The Antivirus agent restores the selected files to their original folders.
Deleting quarantined files	To manually delete one or more files from quarantine permanently, select one or more files to delete and click Delete.