The quarantined files are managed throught the mvadm.exe command line tool. Thereis no ePO support for managing quarantined files.
mvadm.exe q list – Lists the currently quarantined files
mvadm.exe q restore <detected as> - Restores all files of the detection typespecified in the detected as parameter.
mvadm.exe q remove <detected as> - Removes all files of the specified detection name.
mvadm.exe q restore “eicar test file”– restores all files detected as “eicar test file”.
mvadm.exe q remove “eicar test file” – removes all files detected as “eicar testfile”.
Note: When restoring files, if MOVE scanning is still enabled and the file is still considered a threat by the current DATs on the offload server, the file will be rescanned and immediately detected as a threat.