Symantec 11281411 Administration Guide - Page 199

Work with Threat Histories, Undo Action Taken, Start Undo, Clean, Start Clean

Page 199 highlights

Working with Histories and Event Logs 199 Viewing Histories Table 7-4 Threat History actions for viruses and blended threats Action Description Clean Delete Permanently Move To Quarantine Export Symantec AntiVirus virus definitions files are frequently updated. A file that you could not clean yesterday or a few weeks ago might be able to be cleaned when the virus definitions file is updated. You cannot perform this action on compressed files. You can permanently delete any infected file (including a compressed file) that is stored in the Quarantine or Threat History. Permanently deleted files cannot be recovered. If you determine that Symantec AntiVirus has left an infected file alone, you should move the file to the Quarantine, where the virus will be unable to spread. You can move compressed files to the Quarantine. You can export information about a specific Threat History or Event Log item as a CSV or Microsoft Access database file. In the Threat History window, detected non-viral threats appear. You handle these threats differently than viruses and blended threats. In a Threat History, you can perform a different set of actions for viruses than you can for other threats, such as adware and spyware. Work with Threat Histories For viruses, you can undo the last action that was taken on a file, clean a file, delete it permanently, or move the file to the Central Quarantine. For other threats, you can access a Symantec Security Response web page to learn how to handle the threat. You can also export the Threat History data. To undo the last action that was taken 1 Right-click a file, and then click Undo Action Taken. 2 In the Take Action dialog box, click Start Undo. To clean an infected file 1 Right-click a file, and then click Clean. 2 In the Take Action dialog box, click Start Clean.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216

199
Working with Histories and Event Logs
Viewing Histories
In the Threat History window, detected non-viral threats appear. You handle
these threats differently than viruses and blended threats.
In a Threat History, you can perform a different set of actions for viruses than
you can for other threats, such as adware and spyware.
Work with Threat Histories
For viruses, you can undo the last action that was taken on a file, clean a file,
delete it permanently, or move the file to the Central Quarantine.
For other threats, you can access a Symantec Security Response web page to
learn how to handle the threat.
You can also export the Threat History data.
To undo the last action that was taken
1
Right-click a file, and then click
Undo Action Taken
.
2
In the Take Action dialog box, click
Start Undo
.
To clean an infected file
1
Right-click a file, and then click
Clean
.
2
In the Take Action dialog box, click
Start Clean
.
Clean
Symantec AntiVirus virus definitions files are frequently
updated. A file that you could not clean yesterday or a few
weeks ago might be able to be cleaned when the virus
definitions file is updated. You cannot perform this action on
compressed files.
Delete Permanently
You can permanently delete any infected file (including a
compressed file) that is stored in the Quarantine or Threat
History. Permanently deleted files cannot be recovered.
Move To Quarantine
If you determine that Symantec AntiVirus has left an
infected file alone, you should move the file to the
Quarantine, where the virus will be unable to spread. You can
move compressed files to the Quarantine.
Export
You can export information about a specific Threat History
or Event Log item as a CSV or Microsoft Access database file.
Table 7-4
Threat History actions for viruses and blended threats
Action
Description