AnsweredAssumed Answered

Blacklisted applications which have been removed

Question asked by DavidHobbs on May 6, 2018
Latest reply on May 10, 2018 by PeteS

We use blacklisting. So if something on our blacklist is detected by Snow, then we can remove it from the computer.

 

However, there's a problem. After removing the blacklisted software, it continues to be reported by Snow, both in the SLM user interface, and on reports, like "Blacklisted applications per computer".

 

Here is an example, where the blacklisted item was uninstalled a couple of months ago. It still shows in SLM, like this:

 

Removed malware still showing in SLM

 

...and it also still appears in the "Blacklisted applications per computer" report.

 

We think this happens because there is still metering data for this application. So we would need to wait until the metering period has expired before this blacklisted application disappears...

 

Is this a common problem?

 

With our example, we have made absolutely sure that the application has been removed, but Snow continues to report it two months afterwards. Unfortunately, this makes Snow appear to be inaccurate. For us, it's quite a big issue because we can't know if blacklisted software is installed or not.

 

We think it would be better if Snow identified blacklisted applications that have been uninstalled. Is that possible?

Outcomes