---
title: "Handling Files that Contain Malware"
slug: "handling-files-that-contain-malware-1-1"
tags: ["Portal"]
updated: 2026-04-12T12:17:22Z
published: 2026-04-12T12:17:22Z
canonical: "kb.ctera.com/handling-files-that-contain-malware-1-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Handling Files that Contain Malware

If the CTERA Portal is using antivirus software to check for viruses and malware, if an infected file is detected, the file is moved to quarantine and the portal administrator can decide what to do. The file is replaced by a text file called `file_name-infected.txt`, where `file_name` is the original name of your file.

          **Note**

          

If a file called `file_name-infected.txt` already exists, the new infected file is called `file_name-infectedn.txt`, where `n` is a 1, 2, 3, etc, denoting the additional number of times an infected file with this name has been quarantined.

The text file contains information, including how the infected file was uploaded to the HCP Anywhere Enterprise Portal:

```
A file was moved to quarantine
File name: *file_name*
Uploaded from device: *device_name*
Detected threat: *detected_threat*
```

Or:

```
A file was moved to quarantine
File name: *file_name*
Uploaded via portal's UI
Detected threat: *detected_threat*
```

For example, *detected_threat* could be `File is infected with Trojan32`