Quarantine

Quarantine is a special isolated folder on a machine's hard disk where the suspicious files detected by Antivirus and Antimalware protection are placed to prevent further spread of threats.

Quarantine allows you to review suspicious and potentially dangerous files from all machines and decide whether they should be removed or restored. The quarantined files are automatically removed if the machine is removed from the system.

How do files get into the quarantine folder?

  1. You configure the protection plan and define the default action for infected files – to place in Quarantine.
  2. The system during the scheduled or on-access scanning detects malicious files, places them in the secure folder - Quarantine.
  3. The system updates the quarantine list on machines.
  4. Files are automatically cleaned up from the quarantine folder after the time period defined in the Remove quarantined files after setting in the protection plan.

Managing quarantined files

To manage the quarantined files, go to Antimalware protection > Quarantine. You will see a list with quarantined files from all machines.

Name Description

File

The file name.

Date quarantined

The date and time when the file was placed in Quarantine.

Device

The device on which the infected file was found.

Threat name

The threat name.

Protection plan

The protection plan according to which the suspicious file was placed in Quarantine.

You have two possible actions with quarantined files:

  • Delete – permanently remove a quarantined file from all machines.
  • Restore – restore a quarantined file to the original location without any modifications. If currently there is a file with the same name in the original location, then it will be overwritten with the restored file. Note that the restored file will be added to the allowlist and skipped during further antimalware scans.

Quarantine location on machines

The default location for quarantined files is:

For a Windows machine: %ProgramData%\%product_name%\Quarantine

For a Mac/Linux machine: /usr/local/share/%product_name%/quarantine

The quarantine storage is under the service provider's self-defense protection.