Endpoint Protection

 View Only
Expand all | Collapse all

What Does "Pending Repair" Mean in Action List?

  • 1.  What Does "Pending Repair" Mean in Action List?

    Posted Aug 05, 2013 02:21 PM

    I'm looking for further information.  I currently have a scheduled weekly report that generates a Comprehensive Risk Report.  In that Risk Report one of the sections is "Distribution of Actions Taken against Risks".  Under that section there is an entry called Pending Repair.  What does this mean?  And how can I actually see what that breakdown is?  Currently I have a number of approx 3400 viruses but I don't know where these risks are or what these risks are.  How can i dive deeper into this number? 

    Thanks.



  • 2.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 05, 2013 02:33 PM

    check this

    Explanation of Action field values in Symantec Endpoint Protection 12.1 and 11, and Symantec AntiVirus 10.1

     

    http://www.symantec.com/business/support/index?page=content&id=TECH102052

    Pending Repair Specifies the events where a user still needs to take action to complete the remediation of a risk on a computer. For example, this action may occur if a user hasn't responded to a prompt to terminate a process.

     



  • 3.  RE: What Does "Pending Repair" Mean in Action List?

    Broadcom Employee
    Posted Aug 05, 2013 02:34 PM

    Explanation of Action field values in Symantec Endpoint Protection 12.1 and 11, and Symantec AntiVirus 10.1

    http://www.symantec.com/docs/TECH102052



  • 4.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 05, 2013 02:36 PM

    It means there is some manual intervention needed such as the PC needs to be rebooted in order to fully clean or remove the threat.



  • 5.  RE: What Does "Pending Repair" Mean in Action List?
    Best Answer

    Posted Aug 05, 2013 02:37 PM

    To know more about this incident

    Navigate to Monitors - logs- Risk

    click on advanced option, select Pending repair in the Event type. 

    You will get the file path and computer name



  • 6.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 05, 2013 02:42 PM

    Thank you for the explanation.  I still have a question though.  How do I identify what machines have these "Pending Repairs"?  If I know which machines are "Pending Repairs" then I can take action on them. 

    Also how do these "Pending Repairs" coorelate too the Computer Status report under Monitor -> Logs that reports machines that are "Infected"?  According to the Computer Status report I only have 11 machines infected currently and all of them don't amount nearly to 3400 infections like the "Pending Repairs" shows.



  • 7.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 05, 2013 02:45 PM

    Navigate to Monitors - logs- Risk

    click on advanced option, select Pending repair in the Event type. 

    You will get the file path and computer name

    Multiple events of same type will be consolidated to 1 single event

     



  • 8.  RE: What Does "Pending Repair" Mean in Action List?

    Trusted Advisor
    Posted Aug 05, 2013 03:52 PM

    Hello,

    Pending Repair specifies the events where a user still needs to take action to complete the remediation of a risk on a computer. For example, this action may occur if a user hasn't responded to a prompt to terminate a process.

    In this case, you would have to chcek the risk logs, which would provide you information about risk events. Available information includes the event time, event actual action, user name, computer/domain, risk name/source, count, and file/path. http://www.symantec.com/docs/HOWTO27271

    Check these Articles:

    Explanation of Action field values in Symantec Endpoint Protection 12.1 and 11, and Symantec AntiVirus 10.1
     
     
    What Does "Risk was partially removed" Mean?
     
     
    Best Practices for responding to "Left Alone" in the virus or threat history log
     

    Hope that helps!!



  • 9.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 06, 2013 12:17 AM

    HI,

    It is pending for any kind of action and it scan after new definitions are loaded.

    Regards

    Ajin



  • 10.  RE: What Does "Pending Repair" Mean in Action List?

    Posted Aug 06, 2013 01:04 PM

    Thank you Rafeeq for the follow up that answered the second part of my question.

    So reviewing my Montiors -> Risk Logs I have no entries in there.  So I'm assuming that when I pull that Comprehensive Risk Report that the Pending Repair field was a accumulation of all Pending Repairs at one point in time over the week.  Since now when I pull the Monitors -> Risk Logs for the past week I get nothing.

    I guess I just want to be sure that I'm addressing any outstanding Pending Repairs.

     

    Thanks,

    Mike