Cleaning levels

To access cleaning level settings for a desired protection module, expand ThreatSense parameters (for example, Real-time file system protection) and then click Cleaning.

Real-time protection and other protection modules have the following remediation (i.e. cleaning) levels.

Remediation in ESET Endpoint Antivirus 7.2 and later

Cleaning level

Description

Always remedy detection

Attempt to remediate the detection while cleaning objects without any end-user intervention. In some rare cases (for example, system files), if the detection cannot be remediated, the reported object is left in its original location. Always remedy detection is the recommended default setting in a managed environment.

Remedy detection if safe, keep otherwise

Attempt to remediate the detection while cleaning objects without any end-user intervention. In some cases (for example, system files or archives with both clean and infected files), if a detection cannot be remediated, the reported object is left in its original location.

Remedy detection if safe, ask otherwise

Attempt to remediate the detection while cleaning objects. In some cases, if no action can be performed, the end-user receives an interactive alert and must select a remediation action (for example, delete or ignore). This setting is recommended in most cases.

Always ask the end-user

The end-user receives an interactive window while cleaning objects and must select a remediation action (for example, delete or ignore). This level is designed for more advanced users who know which steps to take in the event of a detection.

CONFIG_THREAT_SENSE

Cleaning levels in ESET Endpoint Antivirus 7.1 and below

Cleaning level

Description

No cleaning

Detections will not be cleaned automatically. The program will display a warning window and allow the user to choose an action. This level is designed for more advanced users who know which steps to take in the event of a detection.

Normal cleaning

The program will attempt to automatically clean or delete detections based on a predefined action (depending on the type of infiltration). Detection and deletion of an object is signaled by a notification the bottom-right corner of the screen. If it is not possible to select the correct action automatically, the program provides other follow-up actions. The same happens when a predefined action cannot be completed.

Strict cleaning

The program will clean or delete all detections. The only exceptions are the system files. If it is not possible to clean them, the user is prompted to select an action by a warning window.

The mentioned cleaning level is applied when setting up an ESMC policy for older versions of ESET Endpoint Antivirus:

Cleaning level in the ESMC policy

Applied cleaning level

Always remedy detection

Strict cleaning

Remedy detection if safe, keep otherwise

Normal cleaning

Remedy detection if safe, ask otherwise*

Normal cleaning

Always ask the end-user

No cleaning

* Default value when upgrading to version 7.2 and later with Normal cleaning set in ESET Endpoint Antivirus.