Endpoint Protection

I have a  Lexar  FW CF reader.  Even when the reader has no CF card in it, on a manual scan that  scans memory, load points and known security risks SEP progress shows that it is scanning various files on the drive; all the files it says it is scanning are known viruses.  But the CF reader is empty and there are no files to scan.  Is this because SEP always looks for these files on removable drives even if no removable media is present?

What are the files it is scanning..
No Drive can be empty..always there would be files in it..either hidden or system files or kernel files ( or sometimes rootkits )
There are special tools to check these files ( eg: icesword1.2 )

There is no set of files to which SEP scans it always scans the files that are on that reader.

This seems like odd behavior... an empty media drive doesn't have files in it.

You might want to open a case with Tech Support.

Hi Joe,

You're saying that a SEP manual scan is scanning and finding threats on a removable media that is not even attached-?  That does not sound normal at all.

Can you cut and paste into this thread the SEP Risk History showing the portion of what it scanned from that CF reader?  There may also be some interesting entries about scan omissions in the SEP Scan History.   

Thanks and best regards,

Mick