Quarantine is a secure isolation area where potentially dangerous files are stored after detection. When Gridinsoft Anti-Malware finds threats during a scan, it can move them to quarantine instead of permanently deleting them. This safety feature allows you to restore legitimate files that may have been incorrectly identified as threats while keeping your system protected.
Understanding the Quarantine Process
After completing a scan, Gridinsoft Anti-Malware presents you with a list of detected threats. You have several options for handling these items, with quarantine being the safest and most recommended approach.
Quick Cleaning (Simple Mode)
For users who prefer a straightforward approach, the Clean Now button provides immediate threat removal:

When you click Clean Now, all detected threats are automatically moved to quarantine. This process:
- Removes threats from their original locations
- Stores them securely in the quarantine area
- Prevents them from causing harm to your system
- Preserves the ability to restore files if needed
Why Quarantine Instead of Delete?
Quarantine is safer than permanent deletion because it allows you to recover files that may have been incorrectly identified as threats. This is particularly important for custom software, game modifications, or specialized applications that security software might flag as suspicious.
Advanced Mode Options
For experienced users who want more control over threat handling, Advanced Mode provides several action options for each detected item:

Available Actions
In Advanced Mode, you can choose from these actions for each detected threat:
- Ignore Once: Skip the item in current scan results only. It will be detected again in future scans if still present.
- Ignore Always: Add the item to the Ignore List permanently. Use this for files you know are safe and don’t want detected again.
- Move to Quarantine: Safely isolate the threat while preserving the ability to restore it. This is the recommended action for most situations.
- Delete: Permanently remove the item from your system. Only recommended for advanced users who are certain the file is malicious.
Applying Actions
You have two ways to apply actions in Advanced Mode:

Apply to All Items
Use the “Apply to all” dropdown in the table header to apply the same action to every detected threat simultaneously.
Individual Item Actions
Apply different actions to specific items using the dropdown menu to the right of each threat entry.

Important: Advanced Mode Settings Persist
All action selections made in Advanced Mode are saved when you switch back to simple mode. Review your selections carefully before proceeding with threat removal to ensure appropriate actions are applied to each item.
The Removal Process
After selecting your preferred actions, initiate the removal process to handle the detected threats. Gridinsoft Anti-Malware will process each item according to your selections and provide a completion report.

Once the removal process completes:
- Review the results notification for a summary of actions taken
- Click Close in the congratulation window
- Click OK in the removal results window to return to the main interface
Managing the Quarantine List
The Quarantine list contains all items that have been isolated using the “Move to quarantine” action. This secure storage area allows you to review, restore, or permanently delete quarantined items as needed.
Accessing the Quarantine List
To view and manage quarantined items:
- Navigate to the Tools tab
- Select the Quarantine list option
- Review the list of quarantined items

Quarantine Management Options
For each quarantined item, you have two primary options:

Restore
Returns the file to its original location on your system. Use this option when:
- You determine the file is a false positive
- You need to recover a legitimate file that was incorrectly quarantined
- You want to add the file to your Ignore List for future scans
Remove
Permanently deletes the item from quarantine and your system. Use this option when:
- You’ve confirmed the file is malicious
- You no longer need the quarantined item
- You want to free up storage space
Handling False Positives
Sometimes legitimate files may be incorrectly identified as threats. If you believe a quarantined item is a false positive:
- Restore the file from quarantine (at your own risk)
- Add the file to your Ignore List to prevent future detection
- Report the false positive to our support team
Reporting False Positives:
Help improve Gridinsoft Anti-Malware’s detection accuracy by reporting false positives through our customer support system. Create a new ticket with details about the incorrectly detected file to help us refine our threat detection algorithms.
Best Practices for Quarantine Management
To effectively manage your quarantine and maintain system security:
- Regular Review: Periodically check your quarantine list to manage storage and remove confirmed threats
- Cautious Restoration: Only restore files you’re confident are legitimate and safe
- False Positive Reporting: Report suspected false positives to help improve detection accuracy
- Storage Management: Remove old quarantined items you no longer need to free up disk space
- Documentation: Keep notes about why you restored specific items for future reference
The quarantine system provides a safety net that balances security with flexibility, allowing you to maintain protection while preserving the ability to recover important files when necessary.