Endpoint Protection

 View Only
  • 1.  Quarantine Files dont work once restored

    Posted Jul 03, 2011 09:49 PM

    I got hit with Win Security 7 fake antivirus when testing Sep 12 (SEP didnt pick up or stop the infection btw) but when I ran a full scan - SEP moved a whole lot of exe files to Quarantine, when I restore them they dont work

    Any idea why?



  • 2.  RE: Quarantine Files dont work once restored

    Trusted Advisor
    Posted Jul 04, 2011 12:35 PM

    Hello,

    Symantec Quarantined certain files probably they may be infected or may be they are threat.

    However, Question arises why are you trying to restore these files? 

    Do you think these files are not malicious or they are False Positives?

    I would recommend you to Submit these files to the Symantec Security Response Team and get a report of the same. Probably they are really Threat.

    Here are few Articles which you may follow:

     

    Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.
     
     
    How to troubleshoot FakeAV if it is not detected
     
     
     
    If incase, you think these are not Threats and want to submit these files to the Symantec Security Response Team as False Positives, here is the website:
     
     
     
    Again, here are few more articles which may help:
     
    Restoring a false positive from the Symantec Antivirus quarantine
     
     
    Restoring a false positive file detection from the Symantec Endpoint Protection quarantine
     
     
     
     


  • 3.  RE: Quarantine Files dont work once restored

    Posted Jul 04, 2011 01:37 PM

    As far as the antivirus definitions are concerned, both the products use the same definitions. However there are additional feautures in SEP that requires definitions



  • 4.  RE: Quarantine Files dont work once restored

    Posted Jul 04, 2011 04:20 PM

    When you restore the files from Quarantine they are 0KB files - also their risk name was Suspicious.Cloud.2



  • 5.  RE: Quarantine Files dont work once restored