Hi,
Agree with ArvindKM, thumbs up to his advice.
Risk Tracer identifies the source of network share-based virus infections on your client computers.
When Auto-Protect detects an infection, it sends information to Rtvscan, the main
Symantec Endpoint Protection service. Rtvscan determines if the infection
originated locally or remotely.
If the infection came from a remote computer, Rtvscan can do the following
actions:
■ Look up and record the computer's NetBIOS computer name and its IP address.
■ Look up and record who was logged on to the computer at delivery time.
■ Display the information in the Risk properties dialog box.