Specifications

Protecting Computers from Security Risks
5-37
WARNING! Restoring an infected file may spread the virus/malware to other files and
computers. Before restoring the file, isolate the infected computer and
move important files on this computer to a backup location.
To decrypt and restore files:
If the file is on the OfficeScan client computer:
1. Open a command prompt and navigate to
<Client installation folder>.
2. Run VSEncode.exe by typing the following:
VSEncode.exe /u
This parameter opens a screen with a list of files found under <Client installation
folder>\SUSPECT\Backup.
3. Select a file to restore and click Restore. The tool can only restore one file at a time.
4. In the screen that opens, specify the folder where to restore the file.
5. Click Ok. The file is restored to the specified folder.
Note: It might be possible for OfficeScan to scan the file again and treat it as infected
as soon as the file is restored. To prevent the file from being scanned, add it to
the scan exclusion list. See Scan Exclusions on page 5-27 for details.
6. Click Close when you have finished restoring files.
Backed up
encrypted files
These are the backup of infected files that OfficeScan
was able to clean. These files are found in the
<Client
installation folder>\Backup folder. To restore these files,
users need to move them to the
<Client installation
folder>\SUSPECT\Backup folder.
OfficeScan only backs up and encrypts files before
cleaning if you select Backup files before cleaning in
Networked Computers > Client Management >
Settings > {Scan Type} > Action tab.
TABLE 5-2. Files that OfficeScan can decrypt and restore (Continued)
FILE DESCRIPTION