How to clear Still Infected counts SEPM 11

Created: 13 Feb 2013 | 9 comments

arazas

I have some virus infected counts on home screen. I have resolved the issue on client side but I am not able to find out how do I clear it from SEPM Home screen. It is still showing 96 counts as Still Infected, I want to reset.

Discussion Filed Under:

Login or register to post comments
Comments RSS Feed

Comments 9 Comments • Jump to latest comment

Ashish-Sharma Partner

How to clear Still Infected counts SEPM 11 - Comment:13 Feb 2013 : Link

Title: 'How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager'

Document ID: 2007111913145448

> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007111913145448?Open&seg=ent

To clear the incorrect "Still Infected" status:

Choose Monitors from the left hand panel, and click on the Logs tab.

For Log Type, choose Computer Status.

Choose the appropriate time range, then choose View Log.

On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.

Click Clear Infected Status.

Items should no longer erroneously be identified as infected

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents

Rafeeq

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Aashish is right, follow the above steps.

under the compliance screen you can click on advanced and select no of events to display, make it to 100, select all, clear it.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Chetan Savade Symantec Employee Technical Support Accredited

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Hi,

1. Log into the Symantec Endpoint Protection Manager (SEPM).
2. Click the Monitors tab.
3. Click “Advanced Settings”.
4. Click “Compliance options”.
5. Checkmark “infected only”.
6. Increase the Limit to 1000 entries.
7. Click the button “Save Filter…”.
8. Name it “Clear Infected Status”.
9. Under Use a saved filter, select this new “Clear Infected Status”.
10. Make any needed modifications to the search criteria.
11. Increase the Limit to 1000 entries.
12. Click the button “View Log”.
13. Select the first client entry.
14. Press and hold Shift.
15. While holding shift scroll down to the last entry and select the last client entry.
16. Click “Clear Infected Status”.
17. Repeat steps 12-17 for the remaining pages, if any.

Refer this article:

How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

http://www.symantec.com/docs/HOWTO59235

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&

Ambesh_444 Partner Accredited

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Hi,

Could you plz try initiating a full scan on the systems.

I Hope, Entry would be removed from Still infected status.

AND for

Clear Still infected status from Database

https://www-secure.symantec.com/connect/forums/cle...

Thank& Regards,

Ambesh

Please mark your thread as 'SOLVED' with the answer that helps you.

Sumit G Partner

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Agree with above comments. It can help to close your issue.

Regards

Sumit G.

Ajit Jha Partner

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

To clear the "Still Infected" status:

Choose Monitors from the left hand panel, and click on the Logs tab.
For Log Type, choose Computer Status.
Choose the appropriate time range, then choose View Log.
On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
Click Clear Infected Status.

Regard's

Ajit Jha

Technical Consultant

ASC & STS

Mithun Sanghavi Symantec Employee Technical Support Accredited

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Hello,

To clear the "Still Infected" status:

Choose Monitors from the left hand panel, and click on the Logs tab.
For Log Type, choose Computer Status.
Choose the appropriate time range, then choose View Log.
On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
Click Clear Infected Status.

Items should no longer be identified as infected.

Check these Articles:

How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH102954

How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

http://www.symantec.com/docs/HOWTO59235

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

Ambesh_444 Partner Accredited

How to clear Still Infected counts SEPM 11 - Comment:14 Feb 2013 : Link

Hello,

Please let me know if any more help require..

Thank& Regards,

Ambesh

Please mark your thread as 'SOLVED' with the answer that helps you.

How to clear Still Infected counts SEPM 11

Comments 9 Comments • Jump to latest comment

Would you like to reply?

Links