Endpoint Protection

 View Only
Expand all | Collapse all

File path unavailable

Migration User

Migration UserSep 28, 2012 10:48 AM

Migration User

Migration UserSep 28, 2012 10:53 AM

Migration User

Migration UserSep 28, 2012 11:40 AM

  • 1.  File path unavailable

    Posted Sep 28, 2012 10:40 AM

    Got single risk alert, shows:

    file path: unavailable

    action taken on risk was: deleted

    What does this mean? what do I need to do further?



  • 2.  RE: File path unavailable
    Best Answer

    Posted Sep 28, 2012 10:44 AM

    Should be fine if it was deleted, no further action needed. See this thread:

    https://www-secure.symantec.com/connect/forums/single-rick-event-alerting-file-path-unavailable



  • 3.  RE: File path unavailable

    Posted Sep 28, 2012 10:45 AM

     Risk Log at SEPM shows Virus Found (Details Pending) under Event Actual Action but Filepath shows unavailable

     http://www.symantec.com/business/support/index?page=content&id=TECH139588



  • 4.  RE: File path unavailable

    Posted Sep 28, 2012 10:48 AM

    This was unmanaged client. no sepm. users was traveling with no network drive attach and USB access not allow.



  • 5.  RE: File path unavailable

    Posted Sep 28, 2012 10:48 AM

    But can we say we know cause for sure ?



  • 6.  RE: File path unavailable

    Posted Sep 28, 2012 10:51 AM

    Is there a definite cause? Sure. But unless it was your laptop and you were sitting in front of it right when whatever it was triggered it, you probably won't know for sure. The main concern was that whatever it was, was deleted. From the link I posted, it could've been a few things. Plus, sometimes user's don't give you the full story angry



  • 7.  RE: File path unavailable

    Posted Sep 28, 2012 10:53 AM

    Thanks I'll investigate this further



  • 8.  RE: File path unavailable

    Posted Sep 28, 2012 10:55 AM

    Data Card Access available or not  ?

    I agree Brian comments user not provide full information



  • 9.  RE: File path unavailable

    Trusted Advisor
    Posted Sep 28, 2012 11:02 AM

    Hello,

    Could you provide us more details on what was the Risk name?

    Check this Article:

    "Unavailable" filename and path for Tracking Cookies detections after a scan

    http://www.symantec.com/docs/TECH155119

    Hope that helps!!

     



  • 10.  RE: File path unavailable

    Posted Sep 28, 2012 11:40 AM

    ws.reputation.1



  • 11.  RE: File path unavailable



  • 12.  RE: File path unavailable

    Trusted Advisor
    Posted Sep 28, 2012 12:04 PM

    Hello,

    WS.Reputation.1 is a detection for files that have a low reputation score based on analyzing data from Symantec’s community of users and therefore are likely to be security risks. Detections of this type are based on Symantec’s reputation-based security technology. Because this detection is based on a reputation score, it does not represent a specific class of threat like adware or spyware, but instead applies to all threat categories.

    The reputation-based system uses "the wisdom of crowds" (Symantec’s tens of millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques.

    Hope that helps!!

     



  • 13.  RE: File path unavailable

    Posted Sep 29, 2012 06:12 PM

    Sometimes the File is not present on User Mode and the Malware gets deleted as and when it is accessed in the memory

    It could be a tpye of rootkit.

    As long as the Action is Deleted/Cleaned/Quarantined no need to worry about it.