Hi,
In general, the quarantined files are stored as encrypted files inside a .CAB in a subfolder under C:\ProgramData\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Quarantine.
In addition, you can log into Forefront Client Security using admin users and select the quarantined items from the list, and click the "Restore" button to restore the file to its original discovered location.
Best regards,
Susie
Edited bySusie LongWednesday, July 23, 2014 6:56 AM
Proposed as answer bySusie LongMonday, July 28, 2014 2:37 AM
Marked as answer bySusie LongTuesday, July 29, 2014 2:10 AM