Where is quarantine folder symantec endpoint

Active 5 years, 3 months ago. Viewed times. Improve this question. Only you , the user of your system , can decide if you want to empty the quarantine folder. So they were being detected, by a different module of SEP, which is a good thing. Try to check if you don't have two antivirus instances fighting together.

Add a comment. Active Oldest Votes. Sign up or log in Sign up using Google. All the Malicious files will be put inside quarantine if SEP is not able to clean them, whenever n Broadcom Employee. Migration User. Posted PM. Reply Reply Privately Options Dropdown. RE: Default quarantine folder location Best Answer. Posted AM. Table: Managing the Quarantine Task Description Monitor files in the Quarantine You should periodically check the quarantined files to prevent accumulating large numbers of files.

Delete files in the Quarantine You can delete a quarantined file if a backup exists or if you have a copy of the file from a trustworthy source. Configure how Symantec Endpoint Protection rescans items in the Quarantine when new definitions arrive By default, Symantec Endpoint Protection rescans items in the Quarantine when new definitions arrive. Typically you should keep the default setting, but Specify how clients submit information about quarantined items Symantec Endpoint Protection lets users submit infected or suspicious files and related side effects to Symantec Security Response for further analysis.

Manage the storage of quarantined files By default, the Quarantine stores backup, repaired, and quarantined files in a default folder. You can use the default folder or a folder that you choose. Regards Ajin. This thread already has a best answer. Would you like to mark this message as the new best answer? Specify the path where the quarantined items will be restored. If not specified, the item will be restored to the original path. Your restore results will be that all files in the quarantine that have the same threat name get restored.

This syntax is correct: MpCmdRun. This syntax is not correct and will not work: MpCmdRun. NOTE: To know the exact spelling of a threat name, use the following syntax to generate the list of threat names currently in the quarantine folder:.

One threat can map to more than one file -All Restores all the quarantined items based on name -Path Specify the path where the quarantined items will be restored. Sample syntax: Mpcmdrun —restore -name -path where -name is the threat name, not the name of the file to restore.

There is no method to restore only a single file. In most cases, you should not attempt to access or move quarantined files, as they probably pose a risk to your computer.

If you know for sure a file was quarantined improperly, do not pull it out of the Qbackup folder in Windows -- select it in Norton and click "Restore. Norton will let you select where to move the file. Normally, you should return safe files to the default location, which Norton sets to their original location prior to quarantine. As with viewing and restoring quarantined files, you should not attempt to quarantine files by manually dragging them into the Qbackup folder.

Instead, click "Add to Quarantine" in the Security History window. Type a description for the quarantined file, then click "Browse" and locate your file.