Skip to help content
Troubleshooting and status

Malware scanning and quarantine

Understand pending scans, blocked downloads, quarantine, and the limits of server-side scanning.

Scan states

  • Pending: the finalized object is waiting for a scanner result.
  • Clean: no configured signature was detected and normal access can continue.
  • Quarantined: the scanner reported malware or an invalid object and downloads stay blocked.
  • Unavailable: the scanner could not complete; Astral fails closed for protected access until a safe retry succeeds.

If a file is quarantined

  1. Do not rename or re-upload the same bytes to bypass the result.
  2. Confirm the source through a separate trusted channel.
  3. Run an up-to-date local security scan if you possess an authorized original.
  4. Delete the quarantined transfer or contact the sender for a clean replacement.

Scanning is one layer

A clean result is not a guarantee that a file is harmless. Keep the browser and operating system updated, verify unexpected senders, and avoid enabling macros or executable content you did not request.

Note: End-to-end encrypted files cannot be scanned server-side because Astral never receives their decryption key.

Related guides