RE: Quick Norton AV question
From: Hillensbeck, Preston (PHillensbeck@sfbcic.com)Date: 09/24/01
- Previous message: Robert Clark: "RE: Question about Internet Security Settings"
- Maybe in reply to: Gullett, Chris: "RE: Quick Norton AV question"
- Next in thread: Kinsey, Robert: "RE: Quick Norton AV question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Message-ID: <70B510E03237D311A33100500422D1AA022ED2EE@MERCURY> From: "Hillensbeck, Preston" <PHillensbeck@sfbcic.com> To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com> Subject: RE: Quick Norton AV question Date: Mon, 24 Sep 2001 10:54:01 -0500
Yes I am also interested in finding out about this problem. I have a
couple of computers that keep getting the Anna Kournikova(sp) virus but
when I go to delete it, it says it isn't there. The strange thing is that
it is there usually a 100 times or more.
-----Original Message-----
From: O'Reilly, Tom [mailto:oreilt@jacobsons.com]
Sent: Friday, September 21, 2001 4:02 PM
To: 'Kinsey, Robert'; 'Gullett, Chris '; ''Panger, Erick' ';
''focus-ms@securityfocus.com' '
Subject: RE: Quick Norton AV question
Since we're taking Norton here maybe someone can help me. I use Norton Corp
Ed 7.51 on my clients and I have certain clients that always seem to have a
status of virus found in SSC. I reset the status, but soon they end up
virus found again. If I do a complete scan of their hard drive including
the quarantine from my machine they have no infected files. Also the log
will show the virus being found several times with the action being left
alone in every instance. I find this weird, because I have clean as the
primary action and quarantine as the secondary so I don't understand why it
could be left alone. I search their hard drive for the file listed and it
isn't there anywhere. What am I missing here?
Thanks,
Tom
-----Original Message-----
From: Kinsey, Robert [mailto:Robert.Kinsey@Veridian.com]
Sent: Friday, September 21, 2001 2:16 PM
To: 'Gullett, Chris '; ''Panger, Erick' '; ''focus-ms@securityfocus.com'
'
Subject: RE: Quick Norton AV question
Chris wrote...
>Norton Corp Ed quarantined the file the first time it was found. Then a
>definition update came in, which scans the quarantine folder to see if
>any files in quarantine can now be cleaned and restored. Since the file >in
quarantine could not be cleaned it was "Left Alone".
And this will also generate another alert and listing in the Virus History
(both on the client AND on the SSC if used).
>This will happen every time a definition comes in until you either
>delete the file from quarantine or it's cleaned and restored.
>When you run a manual scan the quarantine folder is NOT scanned.
Once you have scanned and ensured you are not infected (hopefully) you can
delete from the Quarantine folder. If an essential file is in there you
haven't been using it any way and it should not be used either. This will
remove a file the AV cannot clean. Also, if you are using the SSC you
should also remove the virus status off the client and Parent.
Good luck.
rob
- Previous message: Robert Clark: "RE: Question about Internet Security Settings"
- Maybe in reply to: Gullett, Chris: "RE: Quick Norton AV question"
- Next in thread: Kinsey, Robert: "RE: Quick Norton AV question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
