Endpoint Protection

Hi,

Suddenly I  received follwing messages through SEPM console window:

Action Summary -- Blocked Viruses
Risk: Backdoor.Sdbot 
File/entry: driverservice.exe

Is it necessary to do something?? oR

Gjh

 Explanation of Action field values
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006112010562148

It was blocked because the threat must have been on a remote computer on which SEP could not take any action.

Hi,

Thanks for the answer. According the SEPM console window the virus dissapear (Maybe it's blocked and removed).  Does it mean that the virus is removed??

Yes seems like SEP has taken action on it.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111913145448

however you need to manually verified via the SEPM console to ensure the infection/security risk has been handled.