Endpoint Protection

Hi Chaps, There seemto be a problem with the Virus and Risk Activity Summary. It shows a large number under Still Infected, but when I click in the number it just gives me a list of 1 to 200 entries and that is it. I have also looked in the Risk logs for the past 24hrs and there appears to be nothing unusual there. Can somwone give me any advice or point me in the correct direction to see what this number means (4288)

Any help is greatly appreciated

Thanks

PaulC

What's the SEPM version?
 

It means you have 4288 occurrences of this virus on a system. It could be for one specific machine though.

"Still infected" does not depend on the period in this table (one hour in your case). Try to see the Risk log with a period of at least 30 days.

"Still infected" means that there are still infected files on your computers. Run a full scan over your systems to remove them. The number at the Home page will decrease automatically.

See this article:

Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

This is because there is a limit set on the number of entries to be displayed in the reports. By default the limit is 200. This limit can be changed at the following location.

Home -> Preferences -> Logs and Reports -> Maximum number of rows in report table.

Thanks agian to everyone for their input. I will be able to get this sorted out now. I have a feeling it may just be a couple of machines with ongoing problems. I feel confident about getting it fixed now.

Thanks

PaulC