Endpoint Protection

 View Only
Expand all | Collapse all

How to remove USB detected virus in report

Ambesh Sharma

Ambesh SharmaNov 20, 2013 02:55 AM

  • 1.  How to remove USB detected virus in report

    Posted Nov 20, 2013 02:26 AM

    I would like to know, how to remove virus details from report if the virus is detected in USB?

    SEPM: 12.1.4

    OS: Server 2003

     

    I choose the report by clicking below in the SEPM

    err2.jpg

     

    Below report will appear and in the appear, all the details in FILE / ENTRY is from USB.

    err11.jpg

     

    I've played around the log setting as well and seems the problem not solved.

    log.jpg

     

    Anyone have knowledge on how to flush out this reports?

     

     



  • 2.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:31 AM

    Check this

    How to clear the "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH102954



  • 3.  RE: How to remove USB detected virus in report



  • 4.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:48 AM

    Hi,

     

    I didnt find Clear Infected Status button at all. Can guide further?



  • 5.  RE: How to remove USB detected virus in report

    Broadcom Employee
    Posted Nov 20, 2013 02:50 AM

    whats the action taken on the file in USB?



  • 6.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:52 AM

    it was deleted i assume. But now, it appears in the report. Based on my screen shot, there are virus that detected in 2012 which still appearing. Now the PC's not connected with any USB.



  • 7.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:53 AM

    Hi,

    Are you using SEPM 12.x ?

    Still infection clear done automatically in sepm 12.x

    You can check this thread and mithun comments

    https://www-secure.symantec.com/connect/forums/clear-still-infected-items#comment-9007651



  • 8.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:55 AM

    Hi,

     

    In my screenshot, there are virus that detected in 2012. It never gone from the list. Can assist? Im using SEPM21.1.4



  • 9.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:55 AM

    Restart your SEPM and check.



  • 10.  RE: How to remove USB detected virus in report

    Broadcom Employee
    Posted Nov 20, 2013 02:55 AM

    fine, so the malicious files have been deleted.

    now to clean up the report, plug any usb into the machine where it reports still infected and scan. once the scan is clean the status will change. Report will be updated.



  • 11.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 02:56 AM

    restarted and recently have upgraded SEPM from 12.1.1 to SEPM 12.1.4.

    I'm using SQL DB



  • 12.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 03:04 AM

    Those wont go until you run a full scan again on those clients. Run a full scan on those and it will be gone when they send the next scan report.  You can just attach a Dummy USB and run a scan against it , it will be gone.. 

    There is no manual way of clearing still infected in this version.



  • 13.  RE: How to remove USB detected virus in report

    Broadcom Employee
    Posted Nov 20, 2013 06:50 AM

    Hi,

    Thank you for posting in Symantec community.

    As per the reports previous detected external drive was F drive. Connect external USB drive and I think it will detect as a F drive.

    Scan that drive with full scan and let the client upload those logs to the SEPM.

    Once the client updated most recent logs report should get updated.

     



  • 14.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 07:49 AM

    There's no need to restart your SEPM. Just plug in a blank USB and run a full scan on it. Once the scan comes back clean it will update the SEPM and the infected count will drop/disappear.

    The Clear Infected Status is no longer available in 12.1. This happens automatically now.



  • 15.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 08:55 PM

    Hi,

     

    Is there anyway of cleaning up the report without need to plug in any USB? As user may away.



  • 16.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 08:55 PM

    Hi,

     

    Is there anyway of cleaning up the report without need to plug in any USB? As user may away.



  • 17.  RE: How to remove USB detected virus in report

    Posted Nov 20, 2013 08:58 PM

    You could probably edit the SQL database although I wouldn't recommend it nor will it be supported. Easiest way is to just plug in a clean USB and run a full scan



  • 18.  RE: How to remove USB detected virus in report

    Broadcom Employee
    Posted Nov 20, 2013 09:00 PM

    cleaning up information from database , but its not recommended.

    easiest way when user is back ask to scan with USB plugged in.