Pending Side Effects Analysis : Access denied

[Migration User]

Hi,

Please look for the attached screen shot

Am getting this from yesterday.

[pete]

From Paul

 

"SEP has a component called ERASER.  When SEP detects a threat such as yours, it blocks access to the threat then goes and looks in the ERASER database to see what other files might be related to the threat.  It then takes the action you have configured on the file it found and other associated files as per the ERASER database.

 

Side Effects Analysis is when SEP looks through the database to determine if there are other related files.  "Action taken: Pending Side Effects Analysis : Access denied" means SEP has denied access to the file while it consults the ERASER DB for more information... you should see a second notification or log after that tells you what it did with that and its related files.":

 

check this link

https://www-secure.symantec.com/connect/forums/action-takenpending-side-effects-analysis-access-denied

 

I wouls suggest scan the system in safe mode .

[Migration User]

How should i clear the risk log from the SEP clents.

kindly see the attachmants

[pete]

you can delete the log file from SEP client, however why do you want to delete the risk log?

[NRaj]

Thumbs Up to pete.

Why would you like to delete it? They merely tell you that there was an issue.

However if you want to delete them, select the entries and click on the delete button you see in the same window.

[Migration User]

 

It gives a notification while scaning that clearley shows it is detecting
but not deleting the viruses.

 

The exe's of JPEG files are also created whose size is Same for all.

What would be the Desired Solution for the Same.

Attachment(s)

refileserverhangs.zip   397 KB 1 version

[Mithun Sanghavi]

Hello,

Thumbs up to Pete's Comment.

Side Effects Analysis is when SEP checks through the ERASER database to determine if there are any other related files, to one already initially detected. The "SEP notification" that appears is effectively ensures that the file in question has denied access, while it verifies the database for more information. There is normally another notification or log which appears after the first one, where it should tell the user what final action was taken on that file, &/or it's related files.

Review the proceeding notifications or logs after the initial SEP Notification, as this will tell you what action has been taken on the detected file. In some cases, you may find that the file in question is either removed, deleted, cleaned or quarantined etc.

[Migration User]

Your original screenshot... when you took this screenshot, exactly what were you doing? The window title says "Compressed file processing". A file within a compressed file can't be modified/deleted, as I understand it. If you uncompress or unarchive the file, Auto-Protect should delete the file as it tries to write to the disk.

Do you actually see the file C:\Moon\setup50045.fon when browsing to that location?

sandra