How to check what action was taken on a file by Elements Endpoint Protection during a detection?

Issue:

Elements Endpoint Protection has detected a malicious file on a computer. How to check what action was taken on the malware / virus? 

Resolution:

You can check the removal.log for the actual action taken on the detection. The removal.log will show if the file was for example blocked, quarantined or deleted. 

You can collect a wsdiag diagnostic file by running the WithSecure Support Tool. It will create a wsdiag file to the desktop.

The removal.log file can be found at: f-secure\logs\system\FSAV\

Below are the sample of log that will be output:

[removal.log]
 Worm.WORM/LNK.Lodbak.Gen BEGIN
;
;Log created by USS version 5.8.255
;
Worm.WORM/LNK.Lodbak.Gen file "E:\CANON (16GB).lnk" quarantined success 
Worm.WORM/LNK.Lodbak.Gen file "E:\CANON (16GB).lnk" deleted success 
Worm.WORM/LNK.Lodbak.Gen END