Quarantine

Hi, claudiubotezatu

Trend Micro's malware clean-up depends on the type of Malware detected. Eicar is a known test file and doesn't hook itself in the registry or create a scheduled task so the action taken to the file is only to delete it to the system. Eicar was prompted for removal since it's a known malware test file. 

Files under quarantined files are already considered deleted as it was detected by Trend Micro as malicious. It's only giving you an option to restore in case the file detected is a false-positive detection.

If you would like to check if the file is already deleted, you can export the scan result and follow the file path indicated to manually check and delete the file.

- TM_Rochelle

Hello, maybe I was not clear to begin with.

If an user restores some item from 'logs' , how is the user able to figure out , after 6 months, what has been done with those files???

Let's say , which file was restored as long as there is no indication that the "restore' action was ever performed????

Even Windows Defender will mark a file in Quarantine "Deleted or Restored" so the user will know that , even though is still in the log, was handled somehow by the user action (Deleted or Restored)

I had this complaint few years ago, was a promise that "we will look into it" but nothing happened.