Can and how can you delete a file from quarantine

I know that this has been asked and answered before but I have received and found conflicting information. When I asked Norton customer support how to delete files from quarantine they told me that there is no way to do so but you can find people in the Norton community forums saying that you can by pressing Remove From History.

See

https://community.norton.com/en/forums/how-delete-file-quarantine-norton-security

https://community.norton.com/en/forums/how-do-i-permanently-delete-files-quarantine

https://community.norton.com/en/forums/qbackup-folder-question

What should I go, Norton customer support or the Norton community forums and why?

Quarantine, Resolved Security Risks, Unresolved Security Risks = empty.  
Why does Size:, Size on disk:, Contains: increase?

png_13484.png

Quarantine, Resolved Security Risks, Unresolved Security Risks = empty.  
Why does Size:, Size on disk:, Contains: increase?

png_13411.png

Quarantine, Resolved Security Risks, Unresolved Security Risks = empty.  
Why does Size:, Size on disk:, Contains: increase?
png_13376.png

Quarantine, Resolved Security Risks, Unresolved Security Risks = empty.  
Why does Size:, Size on disk:, Contains: increase?

png_13339.png

duplicate removed

Quarantine, Resolved Security Risks, Unresolved Security Risks = empty.  
Why does Size:, Size on disk:, Contains: increase?

Norton Product Tamper Protection Off - Permanently
Restart

Restart

Norton Remove and Reinstall tool > Advanced Options > Remove Only > Restart
QBackup folder not found
Scour File Explorer for Norton remnants > Delete remnants
Restart
Norton Remove and Reinstall tool > Remove > Restart
Norton 360 install + LiveUpdate patch
QBackup folder empty
Restart

Restart

Restart

Norton 360 uninstall > Restart > delete Norton remnants > Restart > install Norton 360 > Restart

billy079:

Thank you for helping me bjm_ I have used Remove From History to delete the quarantined items.

To satisfy yourself:
check your QBackup folder Properties -> size, number of files & folders before and after "Remove from history".
check your QBackup folder Properties -> size, number of files & folders before and after machine Restart.   

check your QBackup folder Properties -> size, number of files & folders before and after "Clear Entries".
check your QBackup folder Properties -> size, number of files & folders before and after machine Restart.   

Thank you for helping me bjm_ I have used Remove From History to delete the quarantined items.

billy079:

It is utterly stupid that I have to ask this question and worse get different answers. If Norton made "Clear Entries" to delete items in quarantine then it should say so in the description that pops up when you hover over telling you in plain English "this deletes files in quarantine" no one should have to ask strangers on the internet how to do this most basic of functions.

I do appreciate that comments regarding "Remove From History" and "Clear Entries" may be/are confusing.  You want an unambiguous declarative statement answering "How to delete a file from Quarantine".   

My preference is "Clear Entries". 
You may prefer "Remove From History".   

Lets hear from Community

You may prefer "Remove From History"

Remove From History - will remove the entry in Quarantine and the linked Quarantine files in QBackup.
Clear Entries - removes the current list of Quarantined Items in the Security History Log but does not remove the files in the QBackup directory.
[...]
If the user opts to "Remove from History", then the files associated with that item are permanently deleted (by Norton, not Windows) from the QBackup area and Quarantine.  They do not exist anymore on that system.  There is no rescanning to take place as the files / item do not exist in the system anymore.  The rescanning of the Quarantine area is automatic and Norton does this without user intervention as part of the entire Quarantine Processing Routines.

https://community.norton.com/en/forums/qbackup-folder-question

 

billy079:

After I have Cleared Entries do I have to restart my rather than turn it off? What happens if I turn off instead of restart? and after restart what are these files that repopulate the Qbackup folder?

When I'm sure I do not need/want item/s listed with Security History -> Quarantine, and I want to remove item/s listed with Security History -> Quarantine.   Then, I opt "Clear Entries". 

When I opt "Clear Entries", I do not Restart machine (at that time) unless I'm told by Norton to Restart machine. 

I had a few items with Security History -> Quarantine ..so, I opted "Clear Entries" and snip'd a few pics to share with you..."Clear Entries" ...my side.

QBackup items that repopulate are files that apparently are under Norton control.  
You asked how to delete items listed with Security History -> Quarantine.   
My preference is "Clear Entries".

If you had asked how to manually delete items listed in QBackup folder. 
My answer is "temporary turn off Norton Product Tamper Protection"...remember to turn Tamper Protection on after manual deletion items in QBackup folder.  Note: index.qbs file cannot be deleted with Norton installed. 

I use "Clear Entries" to clear items listed with Security History -> Quarantine.  
To my satisfaction.  I've cleared items that were listed with Security History -> Quarantine.  

I do not do anything with QBackup folder.   I leave QBackup maintenance for Norton.  
Note: when I refresh my Norton install.  I will delete ProgramData\Norton. 

Thank you for coming once again to answer this question bjm_ but before I Clear Entries I just want to ask a few more questions.
After I have Cleared Entries do I have to restart my rather than turn it off? What happens if I turn off instead of restart? and after restart what are these files that repopulate the Qbackup folder?

It is utterly stupid that I have to ask this question and worse get different answers. If Norton made "Clear Entries" to delete items in quarantine then it should say so in the description that pops up when you hover over telling you in plain English "this deletes files in quarantine" no one should have to ask strangers on the internet how to do this most basic of functions.

Thank you for your help bjm_.

as test:
before Clear Entries
after Clear Entries
QBackup after Clear Entries and before machine Restart (not Shut down)

QBackup after Clear Entries and after machine Restart (not Shut down)


billy079:
Can and how can you delete a file from quarantine

  • 'Remove from history' clears an event from Security History
  • 'Clear Entries' removes all logs and backup information related to resolved Security Risks

Note: QBackup items that remain are under Norton control.  If you want to manually delete items under QBackup.  You need to temporary turn off Norton Product Tamper Protection.  
Note: with Norton installed.  index.qbs file cannot be manually deleted. 

Clear Entries is to clear items in Quarantine.  
Users do not need to do anything with QBackup folder.  

When I'm sure I do not want/need item/s in Quarantine. 
I use Clear Entries.

When I remove Norton to refresh my Norton install.
I'll clear out C:\ProgramData\Norton folder and Norton remnants [here]

  • 'Remove from history' clears an event from Security History
  • 'Clear Entries' removes all logs and backup information related to Security Risks

By default, Norton stores quarantined files within the Norton folder in C:\ProgramData. In this folder, you'll find another folder with a unique ID corresponding to your user account, with a sub-folder bearing Norton's version number. Within this sub-folder, Norton will create an encrypted folder titled Qbackup. Qbackup contains quarantined files, but because Norton encrypts the files to prevent infection, you can't directly access the files by opening this folder. 
      > for example:

  • If you want to clear an event from Security History = Remove from history
  • If you want to remove all logs and backup information (Qbackup) = Clear Entries
    > for example: