A problem with quarantine

Discussion in 'ESET NOD32 Antivirus' started by peri2011, May 20, 2012.

Thread Status:
Not open for further replies.
  1. peri2011

    peri2011 Registered Member

    Joined:
    May 20, 2012
    Posts:
    2
    Location:
    Spain
    I have problem with the quarantine.

    I have a file that always gives false positive, I have excluded.

    Using a folder sync program this file has moved and has been in quarantine.

    I'm going to restore but I can not, the reason is that due to binding of synchronization software and antivirus, the path listed in the quarantine are:

    \\,Y:0000000232149\program\file.exe

    when the correct path is:

    Y:\program\file.exe

    Due to \\,Y:000000000232149\ I can not restore the file, nor does the option "Restore to ..."

    How I can change the reference Nod32 recorded in the quarantine?

    Thank you.

    Ps.: I have to say that this file is important for me because the two copies of the file that I had are in quarantine.

    Also say that I searched the string //Y, in the windows register without success (I'm using Windows 7)
     
    Last edited: May 20, 2012
  2. peri2011

    peri2011 Registered Member

    Joined:
    May 20, 2012
    Posts:
    2
    Location:
    Spain
    I have good news and bad, good is that I had a copy of the file in the recycle bin, the bad news is that the quarantine is malfunctioning, and not the fault of the program folder synchronization, because today I have not used .

    He explained the case: I keep a file on a network drive:

    x:\folder\fichero.exe

    Configure exceptions on nod32 in many ways:

    x:\folder\fichero.exe
    x:\*file*
    ...

    And despite the exceptions nod32 file gets quarantined. I go to quarantine, find this file and view the following route:

    \\x;000000000027abb\folder\file.

    And I can not restore it.

    Fortunately this does not occur on local drives and I saved a copy of the file on a local drive, not to lose, but I want to know about the virus and how to fix it.

    Thanks
     
  3. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    If you believe the report of malware being detected on the file to be a false positive alarm, then you should submit a copy to ESET's virus lab so that they may remediate this in a future virus signature database.

    For information on doing so, please see ESET Knowledgebase Article #141, "How to submit virus or potential false positive samples to ESET's labs."

    Regards,

    Aryeh Goretsky
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.