Endpoint Protection

 View Only
  • 1.  How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 01:44 AM

    I have some virus infected counts on home screen. I have resolved the issue on client side but I am not able to find out how do I clear it from SEPM Home screen. It is still showing 96 counts as Still Infected, I want to reset.



  • 2.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 01:49 AM
    Title: 'How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager'
    Document ID: 2007111913145448
     
    To clear the incorrect "Still Infected" status:
     
    Choose Monitors from the left hand panel, and click on the Logs tab.
    For Log Type, choose Computer Status.
    Choose the appropriate time range, then choose View Log.
    On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
    Click Clear Infected Status.
     

    Items should no longer erroneously be identified as infected

     

     



  • 3.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 02:04 AM

     

    Hi,

    Could you plz try initiating a full scan on the systems.

    I Hope, Entry would be removed from Still infected status.

    AND for 

    Clear Still infected status from Database

    https://www-secure.symantec.com/connect/forums/clear-still-infected-status-database



  • 4.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 02:05 AM

    Aashish is right, follow the above steps.

    under the compliance screen you can click on advanced and select no of events to display, make it to 100, select all, clear it.



  • 5.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 03:16 AM

    Agree with above comments. It can help to close your issue.



  • 6.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 03:55 AM

    To clear the "Still Infected" status:

    1. Choose Monitors from the left hand panel, and click on the Logs tab.
    2. For Log Type, choose Computer Status.
    3. Choose the appropriate time range, then choose View Log.
    4. On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
    5. Click Clear Infected Status.


  • 7.  RE: How to clear Still Infected counts SEPM 11

    Trusted Advisor
    Posted Feb 14, 2013 04:48 AM

    Hello,

    To clear the "Still Infected" status:

    1. Choose Monitors from the left hand panel, and click on the Logs tab.
    2. For Log Type, choose Computer Status.
    3. Choose the appropriate time range, then choose View Log.
    4. On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
    5. Click Clear Infected Status.

    Items should no longer be identified as infected.

    Check these Articles:

    How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

    http://www.symantec.com/docs/TECH102954

    How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

    http://www.symantec.com/docs/HOWTO59235

    Hope that helps!!



  • 8.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 05:03 AM

    Hello,

    Please let me know if any more help require..

     



  • 9.  RE: How to clear Still Infected counts SEPM 11

    Posted Feb 14, 2013 05:24 AM

    Hi

    Please follow the link to resolve the reported issue

    http://www.symantec.com/business/support/index?page=content&id=HOWTO59235&actp=search&viewlocale=en_US&searchid=1360837086881

    Regards

     



  • 10.  RE: How to clear Still Infected counts SEPM 11

    Broadcom Employee
    Posted Feb 14, 2013 09:07 AM

    Hi,

    1. Log into the Symantec Endpoint Protection Manager (SEPM).
    2. Click the Monitors tab.
    3. Click “Advanced Settings”.
    4. Click “Compliance options”.
    5. Checkmark “infected only”.
    6. Increase the Limit to 1000 entries.
    7. Click the button “Save Filter…”.
    8. Name it “Clear Infected Status”.
    9. Under Use a saved filter, select this new “Clear Infected Status”.
    10. Make any needed modifications to the search criteria.
    11. Increase the Limit to 1000 entries.
    12. Click the button “View Log”.
    13. Select the first client entry.
    14. Press and hold Shift.
    15. While holding shift scroll down to the last entry and select the last client entry.
    16. Click “Clear Infected Status”.
    17. Repeat steps 12-17 for the remaining pages, if any.

    Refer this article:

    How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

    http://www.symantec.com/docs/HOWTO59235