Endpoint Protection

Hi all,

I have seen so many forum messages flying around on here but cant pin point one to what we seem to be getting.

1. Logged onto the SSC server viewing a clients machine showing the red cross for risk found - I load up the risk report and its loads up but nothing is there
2. So I right click on that client and clear the risk
3. I then go to the client itself to check just in case there is any left over files from a virus - I check the virus definitions they are all up to date I then do a manual custom level scan on machine still nothing. I then use some 3rd party spyware/ virus tools to see if they pick up anthing... nothing again. The machine is clean - I have also run clean up tools as well to clear out temp internet files and any temp files on the machine and also manually checked temp locations on C: plus the registry for any unusally behaviour.
4. I go back to the SSC and refresh the list and the machine re - appears with a red risk cross!!! Why???

Any help would be fantastic!

Cheers,

Anthony

whenever a risk is detected on a computer. It shows the red cross infected status in SSC.
a red cross means action was already taken on the risk ( cleaned, deleted etc ) it doesn't mean client is still infected.
you can check the risk log of the client it must have detected a threat.

Cheers again Vikram - I'll give that a go and see what happens.

Hi all,
some of my secondary servers and clients shows risk found errors after scanning full scan and clearing the risk status manually still after some time the risk found is displayed and most of the time no virus is detected after full scan.
please suggest how to tacle this situation.
thanks in advance.