Endpoint Protection

I see “Still Infected” on Symantec Endpoint Protection Manager. What does it means and why it appears ? is my system still infected with viruses ?

Attachment(s)

S.Endpoint Protection.pdf   27 KB 1 version

it will go next time when you run full scan and it comes clean

Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

http://www.symantec.com/business/support/index?page=content&id=TECH165846

Just run a full scan on the mahcines which you see in the table. There could be reasons that it might be on a Thumbdrive or a CD Drive. 

If the location is pointed to any of these, just insert a blank drive and scan it. Once sep sends the log to sepm, this will automatically change... 

If stil it doesnt work, there is an alternate which would need manually clearing it. Let me know, I can share the steps.

See Chetan comments

In SEP 11 you may have to perform manual steps.

But in SEP 12.1 status should update automatically.

Following info is very important when we talk about SEP 12.1

"The "Still Infected" number will go down automatically as the threat is completely removed from the network.

This is a part of the enhanced management console. The management server resets the Still Infected Status for a client computer once the computer is no longer infected. It gives a more accurate status for how many client computers really are infected."

I would suggest to manually check those machines

https://www-secure.symantec.com/connect/forums/still-infected-not-changing-home-page-sepm

Voteup below IDEA

https://www-secure.symantec.com/connect/ideas/sepm-121-needs-clear-infected-status-button

Scan the machine. If it comes back clean, this status will automatically clear out from the SEPM.

Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

Hi,

Please check the below article's.

Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console

http://www.symantec.com/business/support/index?page=content&id=TECH165846

https://www-secure.symantec.com/connect/forums/still-infected-status-report

Cannot Delete the "Still Infected" Value From the Symantec Endpoint Protection Manager 12.1 Console