Misreporting a Virus

[mrbusy]

I have SAV Corp AV installed accross all my workstations and servers (about 20 hosts) and I have a problem with misreporting of viruses.
Every Sunday afternoon a full scan of the network takes place and on several machines detects viruses which have already been quarentined. When I try to delete the file from there I get a message saying that it cannot be found, but each week I get a warning that a virus has been located.

Does anyone know why this is happening? I dont have a quarantine server set up and have changed my policy from quarentine to delete to stop this happening in future.

 

[jamesadane]

Have you checked the local quarantine on each workstation? I have a central quanrantine now, but previously I found that the quanratine folder was part of the full scan and so items were found in there with a virus and reported as 'left alone in quarantine'. The default path is as follows on Win2K

C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine

Any files in there and you will almost certainly continue to get virus reports.

James Dane

 

[LawnBoy]

Map to that PC and delete the Symantec log files. There are some in 'all users' and sometime one in a particular user. I have this prob with any NT machine at SP6a.

If all else fails, thoroughly scrub the software off the PC and do a cold reload.