Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

After removal or quarantine of malware, virus or malicious file, why does Elements Endpoint Protection sometimes want the user to restart / reboot the computer?

Issue:

When a malicious file has been successfully put to quarantine, why does Elements Endpoint Protection sometimes want to reboot the computer?

Resolution:

If the file was detected by the Universal System Scanner (USS) component, it will ask to restart the computer because the infection cannot be completely cleaned up while Windows is running. 

You check the removal.log file in the wsdiag diagnostic file if you want to make sure that the detection was made by Universal System Scanner (USS).