I am new to symantec , i have noticed lots of virusses being detected from the system account, how could this be possible. What does it mean to my envrionment. The viruses are dectected from different machines, All users are administrators on their machines, How do i explain this to my manager.
Are they being detected by the scheduled scan? If so the scheduled scan runs in the system context.
Virus removal and troubleshooting on a network
i've found out that , the scheduled scan run on local system account by default , so that explains why i have more viruses decteced under the system account. How do i explain that are viruses that are detected via legit usernames, while the scan that runs are all scheduled.
Scheduled scans run under the System account.
User defined scans run with the logged in user account.
Auto-Protect scans are also detected under the logged in user account.
Those are the differences.
Thanks a ton.
You're welcome. Check back if you need more help or if you're all set please don't forget to mark the post that helped the most as the solution. Thanks!