Alert is not resolved

zwp-secure

After an infection (it was detected and quarantined by WithSecure) the same alert appears again and again. Although we cleared it, cleared also the quarantine and made sure the file does not exist anymore on the client, the alert keeps reappering.
This is how it looks in PM. The same entry keeps coming on and on. With same date and time. By the end of the day, this alert will have replecated itself several times.

Sethu Laks

Hi @zwp-secure

Thank you for contacting the WithSecure Community.

Could you please provide the version of Policy Manager and Client Security/Server Security that you are currently using?

In your situation, please be aware that any infections found will be cleared upon rebooting the client computer. If the issue persists after reboot, consider reinstalling the Client Security/Server Security on the client machine to see if that resolves the issue. If the problem persists, you can run the database maintenance tool on the Policy Manager machine. For detailed steps, please refer to the instructions below: https://www.withsecure.com/userguides/product.html#business/policy-manager/16.00/en/task_E02887FA732B4D9686C82ADE63844464-16.00-en

Best regards,
Sethu
Community Moderator | Technical Support Engineer
WithSecure™ https://www.withsecure.com/en/home

zwp-secure

PM Version: 16.01.98252

Client: 16.0.8376.0/CS, rebooted and reinstalled already.

Will report again…

zwp-secure

I ran the database maintenance tool. Nothing changed, the same alerts keep reoccurring.

Sethu Laks

Hi @zwp-secure

Thank you for trying out the suggested steps, it appears we need to analysis the diagnostic report to find out the exact root causes. We kindly request you to collect the Wsdiag (formerly fsdiag) logs and contact our WithSecure Support team for further investigation. By providing us with these logs, we will be able to identify the exact root cause of the issue and offer you an appropriate solution. Thank you for your cooperation.

Best regards,
Sethu
Community Moderator | Technical Support Engineer
WithSecure™  https://community.withsecure.com/home/leaving?allowTrusted=1&target=https%3A%2F%2Fwww.withsecure.com%2Fen%2Fhome

zwp-secure

It did not happen again since. I guess the database maintenance helped, but it took a little while to resolve the issue.