Situation:
Norton AntiVirus 9.0.x for Macintosh detects a virus or Trojan horse in your email. When Norton AntiVirus for Macintosh 9.0.x repairs an email infected with a virus, the inbox may be moved to Quarantine, leaving your inbox empty. This document describes what you should do when this happens.

Solution:
When Norton AntiVirus discovers a virus, it quarantines the file with the virus rather than deleting it. When the file is quarantined, the inbox may be moved to Quarantine. This is better than being deleted because you can restore the file from Quarantine. If your inbox was moved to Quarantine with an infected email, restore the infected inbox as soon as possible.

---

Note: If you open your email program before restoring your inbox from Quarantine, there may be problems restoring your inbox. This is because when you open your email program and your inbox is not there, the email program will usually create a new mailbox. This may cause problems when restoring the inbox from Quarantine. It is best to restore your inbox from Quarantine before you open your email program.

---

To restore your inbox from Quarantine

1. Open Norton AntiVirus for Macintosh.
2. On the Tools Drawer on the left, click Quarantine.
3. Click the lock to make changes.
4. Type your password, then click OK.
5. Click the infected inbox file that was quarantined.
6. Click Restore.
7. Close the Quarantine window.
8. Quit Norton AntiVirus for Macintosh.

Your inbox should now be restored. You must now delete the email message with the infected file from your inbox. Most likely the infected email will have an attachment that you are not familiar with. Open your email program and browse your inbox for email that has an attachment. When you find the email message with an unknown attachment, delete the message. Be sure to empty the trash in your email program. In most cases these viruses are PC viruses that do not directly affect the Macintosh. When you delete the infected file from your inbox, the next time Norton AntiVirus scans, the inbox will not be deleted.

To prevent Norton AntiVirus from moving infected files located in your inbox to Quarantine, you can disable Automatic Repair and choose not to repair viruses attached to email.

To disable Automatic Repair

1. On the Apple menu, click System Preferences.
2. Under Other, click Norton Auto-Protect.
3. Next to Automatic Repair, click Off.
   If you cannot click Off, click the padlock in the lower-left corner of the window. Type your password, and then click OK.
4. On the System Preferences menu, click Quit.

Now when Norton AntiVirus discovers a virus, it does not automatically repair the virus; it asks whether you want to repair the virus. If the virus is attached to an email message, choose not to repair the virus. Open your email program and browse your inbox for email that has an attachment. When you find the email message with the virus, delete the message. In most cases these viruses are PC viruses that do not directly affect the Macintosh.

If you choose to repair the virus, Norton AntiVirus quarantines the file with the virus rather than deleting it.

Technical Information:
When Norton AntiVirus repairs certain viruses or Trojan horses, it deletes the infected files. With virus definitions previous to June 18, 2004, when Norton AntiVirus deletes a virus or Trojan horse that is attached to an email message, it deletes the file. Depending on the email program, the inbox may also be deleted. With virus definitions dated after June 18, 2004, Norton AntiVirus moves the infected file to Quarantine instead of deleting it. A file can be restored from Quarantine.