Yes, it does happen on 11.x versions. It is not present in version 12.1

You could clear them up immediately by going to the Monitors > Logs

Then select Computer Status > Compliance options >>

Check the "Infected only" then click on "View Log"

Choose "All" on the right drop-down box and click on "Clear Infected "Status"

check this Article:

Still Infected status not clearing on Symantec Endpoint Protection Manager home page

http://www.symantec.com/docs/TECH95463

Hello,

Please work on the steps provided in the Article below:

How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH102954

How to delete Quarantined items from the Symantec Endpoint Protection Manager.

http://www.symantec.com/docs/TECH106444

Sweeping SEPM log data from the database manually.

http://www.symantec.com/docs/TECH105351

Managing log data in the Symantec Endpoint Protection Manager (SEPM)

http://www.symantec.com/docs/TECH90856

Thanks all.

This status is actually from the client itself, not from SEPM.

I wonder what actually this mean, because main sample ".exe" file inside the zipped file has been deleted...

are there any other files apart from .exe in zip?

if you extract the zip file do you see the exe?

Hello,

I understand, that's because the file was Quarantined. That is the reason, you see no .exe in the zip folder.

Check this:

Understanding Quarantine.

What to do after you quarantine a file

So, that is the reason: SEP Action taken is actually quarantined but mentioned in the Risk Details,  "Status: Still contains 1 infected items"

Hope that explains.!!

Hello,

For Clear Infected file or Delete Infected file, checked below mentioned link.

http://www.symantec.com/docs/TECH102954

http://www.symantec.com/docs/TECH106444

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5acc619d5a30571b882573980069a3cd?

Hi,

For a particular PC with a "Still infected status", could you generate a Risk log and see when the last infection report date was, and compare that with the PC's last scan date.

Please do the following: