Video Screencast Help

How to clear Still Infected counts SEPM 11

Created: 13 Feb 2013 | 9 comments

I have some virus infected counts on home screen. I have resolved the issue on client side but I am not able to find out how do I clear it from SEPM Home screen. It is still showing 96 counts as Still Infected, I want to reset.

Comments 9 CommentsJump to latest comment

Ashish-Sharma's picture
Title: 'How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager'
Document ID: 2007111913145448
 
To clear the incorrect "Still Infected" status:
 
Choose Monitors from the left hand panel, and click on the Logs tab.
For Log Type, choose Computer Status.
Choose the appropriate time range, then choose View Log.
On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
Click Clear Infected Status.
 

Items should no longer erroneously be identified as infected

 

 

Thanks In Advance

Ashish Sharma

 

 

Rafeeq's picture

Aashish is right, follow the above steps.

under the compliance screen you can click on advanced and select no of events to display, make it to 100, select all, clear it.

Chetan Savade's picture

Hi,

1. Log into the Symantec Endpoint Protection Manager (SEPM).
2. Click the Monitors tab.
3. Click “Advanced Settings”.
4. Click “Compliance options”.
5. Checkmark “infected only”.
6. Increase the Limit to 1000 entries.
7. Click the button “Save Filter…”.
8. Name it “Clear Infected Status”.
9. Under Use a saved filter, select this new “Clear Infected Status”.
10. Make any needed modifications to the search criteria.
11. Increase the Limit to 1000 entries.
12. Click the button “View Log”.
13. Select the first client entry.
14. Press and hold Shift.
15. While holding shift scroll down to the last entry and select the last client entry.
16. Click “Clear Infected Status”.
17. Repeat steps 12-17 for the remaining pages, if any.

Refer this article:

How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

http://www.symantec.com/docs/HOWTO59235

 

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Ambesh_444's picture

 

Hi,

Could you plz try initiating a full scan on the systems.

I Hope, Entry would be removed from Still infected status.

AND for 

Clear Still infected status from Database

https://www-secure.symantec.com/connect/forums/cle...

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Sumit G's picture

Agree with above comments. It can help to close your issue.

Regards

Sumit G.

Ajit Jha's picture

To clear the "Still Infected" status:

  1. Choose Monitors from the left hand panel, and click on the Logs tab.
  2. For Log Type, choose Computer Status.
  3. Choose the appropriate time range, then choose View Log.
  4. On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
  5. Click Clear Infected Status.

Regard's

Ajit Jha

Technical Consultant

ASC & STS

Mithun Sanghavi's picture

Hello,

To clear the "Still Infected" status:

  1. Choose Monitors from the left hand panel, and click on the Logs tab.
  2. For Log Type, choose Computer Status.
  3. Choose the appropriate time range, then choose View Log.
  4. On the report that is generated, select any item that has a red diamond in the first column that has been verified as cleaned.
  5. Click Clear Infected Status.

Items should no longer be identified as infected.

Check these Articles:

How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH102954

How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.

http://www.symantec.com/docs/HOWTO59235

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ambesh_444's picture

Hello,

Please let me know if any more help require..

 

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

SameerU's picture

Hi

Please follow the link to resolve the reported issue

http://www.symantec.com/business/support/index?pag...

Regards