Endpoint Protection

Hi,

When i had made scan on a mounted drive ,it detected viruses but the SEP log it only despite the first action is clean and the second action is qurantine in

the auto protect and on demand scan actions

when i checked the virus logs i found "log only ,unable to clean or qurantine"

Any Suggestions ?

HI,

Check this thread

https://www-secure.symantec.com/connect/forums/manual-scan-unable-clean-detected-virus-mapped-network-share

Hello,

Could you please name the file and the name of the Threat which symantec has detected??

Check this Article:

How the "Leave Alone" Action works in Symantec AntiVirus

http://www.symantec.com/docs/TECH100975

Also, check this Thread: 

https://www-secure.symantec.com/connect/forums/virus-found-left-alone

Hope that helps!!

Was the file in use at the time of the scan?

The scan you performed was a manual one or was this the autoprotect?

File name : acad.lsp

name of the threat : ALS.Bursted.A    

it is normal virus that SEP can clean from my local drives .

l will check if this file was in use while i was scanning ..

Hi,

Could you pls let me know that scan was completed or not and it was schedule scan or manually scan.

And requesting you to please share the snap shot for the same.

Hello,

I would suggest you to run a Full scan on the remote machine (of the mounted drive machine) and check if Symantec is able to detect and quarantine the file.

Hope that helps!!

it was a manual scan and the scan was completed

I think full scan will on the remote machine will clean the virus but what i am trying to know why the SEP

can't clean this virus on mounted drive.

i think this file may be in use i will check it and i will provide you with the result

If it's in use than you will need to close out the file.

That could be the reason - files on mounted/network drives while being accessed or in a still open session will have a lock for any changes or deletion = SEP would be then only able to log the detection and that would be then expected.