Question/Issue:
You quarantined and submitted a file to Symantec Security Response for analysis. Symantec Security Response indicates that the file is infected with a non-repairable worm or Trojan horse. Symantec Security Response suggests that you delete the file from Quarantine and replace the file if necessary. You want to know what to do.


Solution:
The quarantined file that you submitted can be deleted safely from Quarantine. Deleting a file from Quarantine deletes it from the hard drive. In most cases of infections by worms or Trojans, there is no file to restore, because worm and Trojan files are not used by Windows.

Quarantined files are encrypted and are not a threat to the computer. If you can start Windows and all programs are behaving as expected, then it does not matter whether the quarantined file is deleted.

Include the Symantec Security Response tracking ID number in your message. Our agents will then ask Symantec Security Response to reanalyze your submission.

NOTE: Customers with a valid Gold or Platinum support contract should phone Technical Support for help with a file that is believed to be infected, but Symantec Security Response reports otherwise.

Document ID: 2001042715174006
Last Modified: 09/24/2007
Date Created: 04/27/2001
Operating System(s): Windows 95, Windows NT 4.0, Windows 98, Windows 2000, Windows Me
Product(s): Symantec AntiVirus Corporate Edition 10.0, Symantec AntiVirus Corporate Edition 8.0, Symantec AntiVirus Corporate Edition 9.0, Symantec Client Firewall 8.0, Symantec Client Firewall 8.7, Symantec Client Security 3.0, Symantec Client Security 3.1
Release(s): SAV 10.0, SAV 10.0 [All Releases], SAV 8.0, SAV 8.0 [All Releases], SAV 8.01, SAV 9.0, SAV 9.0 [All Releases], Symantec Client Firewall 8.6, Symantec Client Firewall 8.7, Symantec Client Firewall 8.7 [All Releases], Symantec Client Firewall 8.x [All versions], Symantec Client Security 3.0, Symantec Client Security 3.1, Symantec Client Security 3.1 [All Releases], Symantec Client Security 3.x [All versions]