My company notebook apparently has Symantec AntiVirus installed, 'cause it just popped up an odd dialog box. (Yes, I really ran across this at nearly 4am.)

Notice the "Action taken" part? It says "Quarantine succeeded" followed by "Access denied." I'm left wondering what really happened. Did it succeed or not?

Who knows?

I have always wanted to submit something to This Is Broken, so maybe now is my chance. :-)

Posted by jzawodn at January 16, 2005 03:54 AM

Reader Comments
# Rory Parle said:

Heh heh. The link to This is Broken is missing the colon after http, so Firefox is interpreting it as "http://http//broken.typepad.com/". When I click on it it does a search for http on Google and brings me the first result, www.microsoft.com. :)

on January 16, 2005 04:36 AM
# Kaemaril said:

Presumably "Quarantine succeeded access denied" means that the file the application or user has tried to access has been quarantineed, so you can't access it anymore. Could be worded a bit better...

on January 16, 2005 05:04 AM
# Kaemaril said:

Yikes. Or "quarantined" even.

I'd want a word with those Symantec chaps. It sounds obvious, but it's worded really really badly. If that's the best they could do, they could always hire me to phrase their error messages. If ya pay, I even spellcheck :)

"Quarantineed"... sheesh.

on January 16, 2005 05:07 AM
# blm said:

We (have to) use Symantec Corporate Edition at work and I have been exposed to it for about 5-6years. This error message usually occurs when the file is in use by another program or is itself running. Basically no it didn't succeed.
Thanks for the link to This is broken. Boy do I have some stuff to submit ;-)

on January 16, 2005 05:09 AM
# Kaemaril said:

Apologies for the third post in quick succession.

Quick search over at symantec gives:

Document ID:2000113016231048

Virus alert message reports "Quarantine succeeded: Access denied."

Situation:
Realtime Protection detects a virus, and the alert message reports "Quarantine succeeded: Access denied." What does the "access denied" status mean?

Solution:
In this context, the "access denied" status indicates that Realtime Protection quarantined the file successfully. The program or user that was attempting to access the infected file was denied access to the file.

STILL badly worded, though :)

on January 16, 2005 05:14 AM
# Clay Loveless said:

Hey, you chose to focus your computing time on Windows ... and you're already reaping the benefits of that choice!

Intuitive interfaces, helpful system messages, the need for continuous virus scanning ... all part of the good times that come with Windows as one's platform of choice. Enjoy!

on January 16, 2005 08:46 AM
# Mike D. said:

Are you going to submit the entire OS to "This is Broken" or just the dialog box?

Already enjoying the Windows world again, I see... :)

on January 16, 2005 09:52 AM
# Ivan Tumanov said:

Same thing happened to me, and also with a Thunderbird mail folder. In fact, it happened to be my mailbox that Symantec found to be matching a virus definition. And in fact, royally messed up my mail setup, I think I actually lost a day of email because the quarantine didn't work well with the early build of Thunderbird I was running. Since then I've stopped using Symantec Anti-virus, I hate software that does things without asking you if it should do them first. Especially something as serious as moving or deleting files.

on January 16, 2005 12:09 PM
# Chaz said:

I'm with Ivan -- Symantec screwed my Thunderbird mail and I lost a weekend's worth of Inbox mail. It doesn't mix well with NAV, so I put an exception for that directory and it doesn't scan Thunderbird email folders anymore.

on January 16, 2005 12:34 PM
# Aaron Brazell said:

...and while you're at it, there's a post for a Y! Travel form that is broken over there as well. ;)

Aaron

on January 16, 2005 06:45 PM
# justin said:

seeing Windows screenshots on Jeremy's blog


jeremy jeremy! you've gone over to the dark side.... has the Emperor gotten hold of you, or do you need some more Yoda lessons. The force is strong with you - dont waste it - come back over to the good side, where things are open, free and lot more fun...


;-)

on January 17, 2005 03:50 PM
# Comp Problems said:

I understand, but what happens if the clean fails, the quarantine fails, and access is denied? Does that mean nothing can be done about it and Symantec notifies you of viruses indefinitely? That's what's happening to me...

on November 4, 2005 10:00 PM
# yudhi said:

the virus already quarantine. And Symantec AntiVirus has cut the access go to the file. But the virus still exist in your computer.

on March 18, 2009 07:24 AM
# said:

When I type google.co.in on the address bar, the access is denied. Can u suggest a solution for this problem. please

on December 16, 2009 01:40 AM
# John said:

"I understand, but what happens if the clean fails, the quarantine fails, and access is denied? Does that mean nothing can be done about it and Symantec notifies you of viruses indefinitely? That's what's happening to me..."

I have that problem as well. Symantec Endpoint finds a Trojan horse "APQ1646.tmp" in its own quarantine folder and quarantines it(!), regardless of my settings on what it should do with infected files. And despite me setting the quarantine folder not to be searched. This creates a loop that uses 50-90% of the CPU...

The trojan is originally found in the browser temp internet files folder, but clearing that doesn't help. Neither does clearing the quarantine. Permanently deleting anything quarantined isn't possible, and restarting the computer doesn't help.

on January 13, 2010 05:26 AM
Disclaimer: The opinions expressed here are mine and mine alone. My current, past, or previous employers are not responsible for what I write here, the comments left by others, or the photos I may share. If you have questions, please contact me. Also, I am not a journalist or reporter. Don't "pitch" me.

 

Privacy: I do not share or publish the email addresses or IP addresses of anyone posting a comment here without consent. However, I do reserve the right to remove comments that are spammy, off-topic, or otherwise unsuitable based on my comment policy. In a few cases, I may leave spammy comments but remove any URLs they contain.