Endpoint Protection

How to cure the virus if the action taken status is "details pending".

Update machine with latest RapidRelease definitions Run a Scan in safe mode..

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=rr

I would download the SERT tool (Symantec Endpoint Recovery Tool), and update it with the latest defs. The tool can be downloaded via fileconnect. It is a boot CD, so you'll need to burn the ISO.

Here are the instructions on how to update the defs:

http://www.symantec.com/business/support/index?page=content&id=TECH131732&locale=en_US

Any time, that you can get an enviroment where windows files and services are not use it's the way to go. Makes it a lot easier to remove threats.

Here is some info on that action as well as others:

http://service1.symantec.com/SUPPORT/ent-security.nsf/b7186c7fefd6f0c3882573410063493e/16179a5b53c4d21b8825722c00680866?OpenDocument

If the nature of the threat detected from different location is same, it gets compressed and in risk logs it shows File Path as “SUMMARIZED DATA” and Action as “Detail Pending”. It is due to below mentioned reasons:

1. The Information is not available as it has been deleted from the database.
2. By default, the compressed data gets deleted after 7 days from the Symantec Endpoint Protection Manager Database.