Following an unwanted 'Shh' detection you wish to restore files that were moved from their original location.
- For this to occur your anti-virus configuration was set to the non-default option of: 'Deny access and move to.'.
- Items shown in the Quarantine Manager have not been moved. This article is therefore not relevant for those entries.
First seen in
Sophos Anti-Virus for Windows 2000+
An unwanted detection has moved files from their original location to an 'INFECTED' (or custom defined) directory.
What To Do
See article 118323. The updated endpoint remediation script now has the ability to move files back to their original location in addition to all the previous functionality.