Quarantine 17.8 missing affected item names, locations and object types

I am trialling F-Secure Safe 17.8 on Windows 10 1909 (build 18363.900).

This was a clean installation of that version with no prior versions installed.

A few days after installation F-Secure notifies me there a quarantined Items.

When I visit the quarantine area and double click the item listed I only see very basic

info logged such as the suspected name of the PUA but there is absolutely no indication

of the affected object whether it's a file, registry location etc. So I have absolutely no idea

as to what is affected.


Answers

  • DawidFSDawidFS Posts: 73 Moderator

    Dear @Shen2020


    Please try following solution :


    If you wish to see the files that are contained in the Quarantined folder:

    1. Open Windows File Explorer, and go to C:\ProgramData\F-Secure\Quarantine\Repository. Enter your administrator credentials when asked.
    2. Right-click on the TAR folder, and select Properties.
    3. Go to the Security tab, and click Edit.
    4. Click Add....
    5. Type in Everyone in the 'Enter the object names to select' field, and click OK.
    6. Select Everyone from the 'Group or user names' list, and under 'Permissions for Everyone', check the Allow Full control box.
    7. Create a password-protected archive of the following folder with the password: infected.
    8. Submit the zip file (archive) to our analysts.
    9. Important: Return to TAR folder > Properties > Security tab > Edit, and remove Everyone from the list.


    Let me know if it helped,


    Cheers!


    Dawid

    Jaims
Sign In or Register to comment.