It is possible to recover files that have recently been cleaned up by Sophos Anti-Virus if the product installed contains our SafeClean functionality. Files can be restored on the local computer using the scc.exe command utility as explained below.
Note: An overview of SafeClean, including which products contain the functionality, can be found in article 119988.
Applies to the following Sophos product(s) and version(s) Sophos Virus Removal Tool
Note: If possible ensure a file of the same name is not present in the original folder it was cleaned up from before following the steps below. Otherwise the restore process will fail.
On the local computer where the scan was run:
scc.exe restore -recordid=<RecordID> -itemtype=<ItemType>
Return value: 0x00000000
Note: A full list of available switches for the scc.exe program can be viewed by running scc.exe -h
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.