Video Screencast Help

general q on virus

Created: 03 Mar 2014 • Updated: 06 Mar 2014 | 6 comments
This issue has been solved. See solution.

Some of the file which MCafee Antivirus is indicate as a virus but symantec not be detect it.

What is the reason that both antivirus show different result?

Comments 6 CommentsJump to latest comment

raju123's picture

Both of the AV are different and the virus enginee for both is different.

It is possible that one Antivirus catch the file as virus and other not because the coding of both are different.

You can submit that file to symantec and they can analysis the file and will provide the defintion against that virus

http://www.symantec.com/security_response/submitsa...

 

Check the below thread

https://www-secure.symantec.com/connect/forums/why...

 

Scanning a file with a competitor's antivirus program detects a virus, but scanning with Symantec Endpoint Protection does not

Article:TECH98929  |  Created: 2000-01-06  |  Updated: 2014-02-14  |  Article URL http://www.symantec.com/docs/TECH98929

 

SOLUTION
pete_4u2002's picture

can you check this link

What to do when a competitor's antivirus, adware scanner, or spyware scanner detects a threat that Symantec AntiVirus does not detect

http://www.symantec.com/business/support/index?page=content&id=TECH99494

Mick2009's picture

Hi dip_mis,

"Thumbs up" to both of the above.  Definitely do follow the advice in the following article:

How to add or remove features to existing Symantec Endpoint Protection (SEP) client installations
http://www.symantec.com/docs/TECH90936

SEP with IPS and the other components will block about twice of what AV alone will.

Hope this helps!

Mick
 

With thanks and best regards,

Mick

.Brian's picture

Fact is, detecting a virus is signature based, if SEP is not detecting it, it does not have a current signature to detect it. You can submit it if needed.

How to run Symantec Power Eraser with the SymHelp utility

http://www.symantec.com/docs/TECH203683

Security Response recommendations for Symantec Endpoint Protection 12.1 settings

http://www.symantec.com/docs/TECH173752

Security Response recommendations for Symantec Endpoint Protection 11.x settings

http://www.symantec.com/docs/TECH122943

Security Best Practice Recommendations

http://www.symantec.com/docs/TECH91705

How to scan in safe mode with Symantec Endpoint Protection 12.1 RU1 MP1 and earlier

http://www.symantec.com/docs/TECH176971

Scanning in Safe Mode is no longer possible with 12.1 RU2 and later

http://www.symantec.com/docs/TECH205872

Is your system infected? Symantec tools to help clear an infection

https://www-secure.symantec.com/connect/forums/you...

Symantec Endpoint Protection – Best Practices

http://www.symantec.com/page.jsp?id=stopping_malware

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would suggest to go through the following article:

Scanning a file with a competitor's antivirus program detects a virus, but scanning with Symantec Endpoint Protection does not

http://www.symantec.com/docs/TECH98929

Different computer security vendors have different criteria for what files and behaviors are considered malicious or suspicious.  Symantec, for example, will only detect and remediate files that are in themselves harmful.  Threat artifacts, autorun files and similar are not universally detected.  This is by design.  (For more information, please see Why Symantec Endpoint Protection does not remove AT, INF, INI, and registry keys related to infections.)  The article Symantec's Antispyware Approach may help clarify why certain products are or are not detected by SEP.

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

dip_mis's picture

Thanks all of you are provide such a helpful links