Quarantine Failed on AMP

[Mady]

What are the possible reasons why AMP agent mark a malicious file as quarantine failed? We have instance that the agent pop-up and showed threat detected but based on the description it was quarantined failed.

Thanks!

[David Janulik]

Mady,

this is difficult to answer, when there is no diagnostic data. The one possible reason is file deleted in the meantime. I'd search for the SHA-256 in the sfc.exe.log.

David

[Jeff Lin]

My case is detect another AV(360se.exe), it will appear quarantined failed.

[Jetsy Mathew]

Hello Jeff,

We would be requiring the sha and a copy of this file along with the diagnostics to verify what has happened with this particular file.

Could you please open a TAC support case so that we can verify the same for you.

Regards

Jetsy