SonicWALL 4.5 User Manual
91
Enforced Client Product Guide
Using the Virus and Spyware Protection Service
Scanning client computers
4
To view results of a manual scan:
In the
In the
Scan Completed
dialog box, click
Report
to display the
Scan Statistics
report.
What is in a Scan Statistics report?
The
The
Scan Statistics
report opens in the default browser and displays the following information:
Date and time the scan was started.
Elapsed time for the scan.
Version of the scanning engine software and
DAT
file.
Date of the last update.
Completion status of the scan.
Location of the scanned items.
Status for scanned files, registry keys, and cookies:
How detections are handled
The type of threat and the policy settings determine how the virus and spyware protection service
handles a detection:
handles a detection:
Files and programs
Virus detections: The virus and spyware protection service attempts to
clean the file. If it can be cleaned, the user is not interrupted with an
alert. If it cannot be cleaned, an
clean the file. If it can be cleaned, the user is not interrupted with an
alert. If it cannot be cleaned, an
alert appears, and the detected file is
deleted. A copy is placed in the quarantine folder.
Potentially unwanted program detections: If the virus and spyware
protection service is set to
protection service is set to
Protect
mode, detections are cleaned or
deleted. If set to
Prompt
mode, users must select the response. See
for details.
In all cases, an encrypted backup copy of the original item is saved in a
quarantine folder (see
quarantine folder (see
). Data for
all activity is uploaded to the SecurityCenter for use in reports.
Registry keys and cookies
Detections initially appear as
Detected
for instructions on cleaning the detections. Cleaning detected
files also cleans their associated registry keys and cookies. Their status
is then reported as
is then reported as
Cleaned
.
Scanned
Number of items scanned.
Detected
The item is still a threat and still resides on the system. For files, they are most
likely contained within a compressed archive (for example, a .
likely contained within a compressed archive (for example, a .
ZIP
archive) or on
write-protected media. For registry keys and cookies, the file it is associated
with has a status of
with has a status of
Detected
.
Cleaned
The item was cleaned of the threat. An encrypted backup copy of the original
item was saved in a quarantine folder, where it can be accessed only with the
item was saved in a quarantine folder, where it can be accessed only with the
Quarantine Viewer
(see
).
Deleted
The item could not be cleaned; it was deleted instead. An encrypted copy was
saved in a quarantine folder, where it can be accessed only with the
saved in a quarantine folder, where it can be accessed only with the
Quarantine
Viewer
).
Items with detections
How the service handles the detections