How to manage Norton 360 quarantined items


I'm using Norton 360 to quarantine infected files. Can you explain how to retrieve the files from the Quarantine and how to manage the items that are being quarantined?


Norton 360 uses the Security History Quarantine for providing a safe location for files on your computer that need to be isolated from the system. While they are in the quarantine you can decide what to do with them and take appropriate action.

Norton isolates quarantined items from the system, so that they cannot spread infection or infect other computers. In some cases, you may have an item that you think is infected, but isn't identified as a risk by the Norton 360 scans.

If you suspect an item might be infected, you can manually place them in the Quarantine. No need to worry if you open a quarantined item unintentionally. Opening an item that is in the quarantine won't spread the virus. The Security History Quarantine includes the following groups of items:

  • Security risks Includes items such as spyware and adware that are generally low risk and that are required by another program to function properly. You can restore these items if necessary.
  • Security threats Includes viruses and other high-risk items.

Once an item has been quarantined, you have several options. All of the actions that you take on quarantined items must be performed in the Security History Quarantine.

To perform an action on a quarantined item:

  1. In the Security History window, in the Quarantine view, select the item on which you want to perform the action.
  2. In the right pane, click More Details.
  3. Under Actions, select the action that you want to perform. Your options are:
    • Restore & Exclude Returns the selected item to its original location without repairing it.
    • Remove From History Removes the selected item from the Security History log.
    • Submit to Symantec Sends the selected item to Symantec. In some cases, Norton 360 might not identify an item as a security threat, but you might suspect that the item is infected. In such cases, you can use this option to submit the item to Symantec for further analysis.
  4. Click Finish.

How to add an item to Norton Quarantine

The Security History Quarantine provides a safe location on your computer in which you can isolate items while you decide an action to take on them. The Quarantine view in the Security History window displays a list of quarantined items. You can view the name and the risk status of each quarantined item. You can manually add an item to the Security History Quarantine.

You can use the Add to Quarantine option in the Quarantine view in the Security History window to quarantine the items that you suspect are infected. This action has no effect on the items that are already quarantined.

To add an item to the Quarantine:

  1. In the Security History window, in the Quarantine view, click Add to Quarantine.
  2. In the Manual Quarantine dialog box, in the Description text box, type a short name for the item that you want to add. This text appears in the Quarantine, so you should use a recognizable description.
  3. Click Browse
  4. In the Select File to Quarantine dialog box, browse to the item that you want to add, select it, and then click Open.
  5. To remove the item from your disk so that it exists only in the Security History Quarantine, in the Manual Quarantine dialog box, check Remove file from disk.
  6. Click Add
  7. Click Close.

How to restore an item from Norton Quarantine

Some programs rely on other programs that are classified as security risks in order to function. The program may not function if a particular security file is removed. All of the removed security risks are automatically backed up in the Security History Quarantine. This way, Norton 360 lets you restore any risk to regain the functionality of a program that requires the risk program to run.

For example, a shareware or freeware program that you download may use adware to keep its price low. In this case, you can allow the security risk program to remain on your computer or restore it if spyware protection has removed it. Some quarantined items are successfully disinfected after Norton 360 rescans them. You can also restore such items.

Note: If you restore an item to a directory other than its original location, it may not function properly. Therefore, it is recommended that you reinstall the program.

To restore an item from the Norton Quarantine do the following:

  1. Select the item that you want to restore in the Quarantine view.
  2. Select More Details.
  3. In the Details window, click Restore & Exclude.
  4. In the Quarantine Restore window, select Yes.
  5. Click Close.

How to remove items from Norton Quarantine

Items can be removed from the Quarantine at any time. But remember, that when you delete an item from the Norton Quarantine, it is irrecoverably deleted for ever. Delete quarantined items only if you are sure you no longer need them.

To remove Norton Quarantine items do the following:

  1. Select the item you wish to delete in the Security History window (Quarantine view).
  2. Click More Details.
  3. Click Remove From History in the Details window.
  4. In the Delete Quarantine Item dialog box, select Yes.

Manually submitting Norton Quarantine item to Symantec

Norton automatically submits viruses and other risks to Symantec for analysis. If automatic submission is turned off, you can still manually submit an item from the Security History Quarantine. Submitting infected items to Symantec, helps Symantec engineers to work on new cures and to build up the virus database more quickly. Personally identifiable information is never included in submissions.

You can manually submit a Quarantine item to Symantec by following these steps:

  1. Select the item you wish to submit in the Security History (Quarantine view)
  2. Click More Details.
  3. Click Submit to Symantec in the Details window, under Actions
  4. In the confirmation dialog box, click OK.