Using the Symantec Endpoint Protection Quarantine Feature

What does it mean when Symantec places a file in 'Quarantine'?

When Symantec Endpoint Protection detects an infected file, it tries to do two things with it. First, it tries to clean the file and restore it to the original state. If that fails, Symantec will 'Quarantine' the file. This basically means that it moves the file into a protected area where it won't cause any more harm. At this point you can choose to either delete the file from Quarantine or restore it.

Some files, such as Eudora or Outlook Express mailboxes (.mbx or .dbx respectively) are placed in Quarantine because Norton is detecting an infected e-mail message or attachement but can't delete it. You can resolve this by deleting any infected e-mails and their attachments.

You can delete files that are in quarantine by following these steps:

1. Open Symantec Endpoint Protection by double clicking the 'Shield' icon located in the right hand bottom corner of your computer screen.
2. Click the Quarantine tab. It is located on the left side of the Symantec Endpoint Protection window.
3. Select the item you wish to remove and click 'Delete' to delete it.
4. Click 'Yes' on the confirmation window.
5. Repeat for any other quarantined files you want to remove.

You can restore files that are in quarantine by following these steps:

1. Open Symantec Endpoint Protection by double clicking the 'Shield' icon located in the right hand bottom corner of your computer screen.
2. Click the Quarantine tab. It is located on the left side of the Symantec Endpoint Protection window.
3. Select the item you wish to restore and click 'Restore' to restore it.
4. Click 'Yes' on the confirmation window.
5. Repeat for any other quarantined files you want to restore.