Table of Contents
Advertisement
Viewing quarantined files on client computers
Use this task from a client computer to view and manage quarantined items in the Quarantine Viewer.
You must be logged on as an administrator to access this task.
When virus and spyware protection detects a threat, it places a copy of the item containing the threat
in a quarantine folder before cleaning or deleting the original item. The copy is stored in a proprietary
binary format and cannot harm the computer. By default, items in the quarantine folder are deleted
after 30 days.
Task
Click the Total Protection Service icon in the system tray, then select Open Console.
1
From the Action Menu, select Product Details.
2
In the Virus and Spyware Protection section, select View Quarantined Files.
3
The Quarantine Viewer lists all the items in the quarantine folder and their status.
Select one or more items, then click an action.
4
• Rescan — Scan each selected item again. This option is useful when new detection definition
(DAT) files include a method of cleaning a detection that could not be cleaned previously. In this
case, rescanning the file cleans it and allows you to restore it for normal use.
• Restore — Place each selected item back in its original location on your computer. The restored
item will overwrite any other items with the same name in that location.
Virus and spyware protection detected this item because it considers the
item to be a threat. Do not restore the item unless you are sure it is safe.
• Delete — Remove each selected item from the quarantine folder, along with all associated registry
keys and cookies. No copy will remain on your computer.
Check the status of each item:
5
• Cleaned — The item was cleaned successfully and can be used safely. A backup copy of the
original item was placed in a quarantine folder, in a proprietary binary format.
• Clean failed — The item cannot be cleaned.
• Delete failed — The item cannot be cleaned or deleted. If it is in use, close it and attempt the clean
again. If it resides on read-only media, such as CD, no further action is required. Virus and
spyware protection has prevented the original item from accessing your computer, but it cannot
delete the item. Any items copied to your system have been cleaned.
If you are not sure why the item could not be cleaned, a risk might still
exist.
• Quarantined — You have not performed any action on this item since it was placed in the
quarantine folder.
6
Select Get more information on the threats detected to open a browser window and visit the McAfee Labs
Threat Library.
7
Click Back to close the Quarantine Viewer and return to the console.
Viewing user-approved programs and applications
Use this SecurityCenter task to see which applications users have approved to run on their computers.
You can also add the applications to one or more policies so they will not be detected as unrecognized
programs on computers using the policies.
Using Virus and Spyware Protection
McAfee Total Protection Service 5.1.5 Product Guide
Managing detections
4
81
Advertisement
Table of Contents
