Endpoint Protection

 View Only

  • 1.  Cant get rid of virus - no repair available

    Posted Dec 11, 2015 02:15 PM
      |   view attached

    Hello - I have found a virus that I cannot get rid of because the SEPM states there is no repair available.  See attachment.

     

    How do i get rid of the virus.  could it be that the drive is encrypted??

     

    thanks

    Attachment(s)

    docx
    Doc9.docx   711 KB 1 version


  • 2.  RE: Cant get rid of virus - no repair available
    Best Answer

    Posted Dec 11, 2015 02:18 PM

    Correct. If the drive is encrypted, SEP can't decrypt it. You'll need to decrypt it then run another scan and hopefully that will take care of it.

    Otherwise just delete the file manually.



  • 3.  RE: Cant get rid of virus - no repair available

    Posted Dec 11, 2015 02:26 PM

    THANK YOU SO MUCH FOR YOUR FAST RESPONSE!!  YOU ROCK!!!



  • 4.  RE: Cant get rid of virus - no repair available

    Posted Dec 11, 2015 02:36 PM

    You're welcome. Always happy to help :)

    Have a nice weekend.



  • 5.  RE: Cant get rid of virus - no repair available

    Broadcom Employee
    Posted Dec 11, 2015 02:55 PM

    Hi,

    Is it encrypted drive?

    Explanation of Action field values in Symantec Endpoint Protection 12.1 and 11, and Symantec AntiVirus 10.1

    No repair available : Specifies the events where a risk was detected but no repair is available for the side effects of this risk.

     



  • 6.  RE: Cant get rid of virus - no repair available

    Posted Dec 11, 2015 04:49 PM

    Yes it is encrypted

    I do have this question

     

    It’s my understanding that if I were to plug in an encrypted USB drive and not immediately unlock it, it will not get scanned by local SE.

    I assume files will be scanned only when they are moved or modified or when the next system scan occurs.

     

    Is there a period of time that a user has to unlock the drive for it to be scanned locally?

    Is there possibly a configuration that can be changed so as soon as an encrypted drive is unlocked it is scanned?

     

    Thanks,



  • 7.  RE: Cant get rid of virus - no repair available

    Posted Dec 11, 2015 04:57 PM

    SEP does not work in this fashion. It would only scan the files if they were "actioned", meaning modified, executed, etc. It wouldn't actively wait for a drive to be decrypted and the know to scan it. A scan would need to be kicked off manually.