Ransomware quarantine

Quarantine is a special storage that is used to isolate blocked applications from your computer and data. When you place an application file in quarantine, the risk of potential harmful actions from the blocked application is minimized.

Initially, there is no quarantine folder on your computer. Acronis True Image 2018 creates it when you sequentially perform the following steps:

1. Select the Ask to move potential threats to quarantine (experimental) check box in the Active Protection settings. Refer to Managing Acronis Active Protection for details.
2. When Acronis True Image 2018 detects a suspicious process and informs you about it, you decide to place the corresponding application in quarantine. Refer to Protecting your data from ransomware for details.

A quarantine is created in the root folder of the partition where the attacked files were stored, for example C:\Acronis Active Protection Storage\Quarantine\. When you place a file in the quarantine, you can still operate it as an ordinary file—move it to another location, copy, or delete it. Be aware, that Acronis True Image 2018 moves files to quarantine—it does not copy them. When you delete a file from quarantine, you delete it permanently, and it cannot be restored. If you place an application file in quarantine by mistake, you can still copy or move the file to its original location on your computer. The application will continue working normally.