Reviewing quarantined files

---
title: Reviewing quarantined files
description: Review quarantined file attachments and take further action as needed.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/resolve-infected-file.html
release: australia
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Antivirus Scanning]
---

# Reviewing quarantined files

Review quarantined file attachments and take further action as needed.

## Before you begin

Role required: antivirus\_admin or admin

## About this task

Monitor your quarantined file entries in the Antivirus Quarantine page at regular intervals to perform any of the following actions.

## Procedure

1.  Navigate to **All** > **Antivirus** > **Quarantine**.

2.  Select the check box next to each quarantined entry on which you want to perform an available action.

3.  Select the **Actions on selected rows** drop-down in the banner to choose the action to be performed on the selected row quarantined entry.

    |Action|Description|
    |------|-----------|
    |**Delete**|Select this action to delete the quarantined file if it is not required any more by users.|
    |**Restore**|Select this action to restore the file based on your assessment of its status or on the user request. However, scan the file with your third-party antivirus product before you restore it to mitigate any virus threats. Once restored, the file is available for download to the user.|
    |**Download**|Select this action to download the file to your local system for further scanning and analysis.|


## Result

The system asks for confirmation and performs the selected action per your input.

**Related topics**  


[instance-security-center]