SonicWALL 4.5 Frozen Dessert Maker User Manual


 
108
Enforced Client Product Guide Using the Virus and Spyware Protection Service
Managing detections
4
Manage quarantined files
When the virus and spyware protection service detects a threat on a client computer, it attempts
to clean the item where the threat is detected. The item might be a file, cookie, or registry key.
If it cannot clean the item, it deletes the original item and places an encrypted copy in a
quarantine folder.
If it can clean the item, it places an encrypted copy of the original detected item in a
quarantine folder. This copy serves as a backup.
Once quarantined, these items pose no threat to client computers. It is not necessary to view or
delete them, but you might occasionally want to do so. In these situations, you must view the
files on the client computer using the
Quarantine Viewer.
Note
To check quarantined files:
1 On the client computer, hold down the Ctrl and Shift keys and click in the system tray.
2 Select Scan Tasks | Quarantine Viewer.
The Quarantine Viewer lists all the items in the quarantine folder and their status.
3 Select one or more items, then click an action:
Rescan
Scan each selected item again. This option is useful when new detection definition
(
DAT) files include a method of cleaning a detection that could not be cleaned
previously. In this case, rescanning the file cleans it and allows you to restore it for
normal use.
Restore
Place each selected item back in its original location on the computer. The restored
item will overwrite any other items with the same name in that location.
Note: The virus and spyware protection service detected this item because it
considers the item to be a threat. Do not restore the item unless you are sure it is safe.
Delete
Remove each selected item from the quarantine folder, along with all associated
registry keys and cookies. No copy will remain on the computer.
Files are placed into the Quarantine Viewer in a format that is no longer a threat to the client
computer. After 30 days, these files are deleted. Only users with administrator rights can access
the
Quarantine Viewer.