Hi,
Thank you for posting.
As far as I know, when the forefront has detected some malware, the alerts will be showing on the dashboard. The Notifications section of the dashboard shows the number of new and active Client Security alerts. When you have opened the MOM Operator console, you can view details about alerts. After you have resolved these issues, you should change the alert resolution state in MOM as resolved. In the Notifications section of the dashboard it correctly states that there are 0 new and 0 active client security alerts. And the dashboard will automatically clear 24hrs after issue being resolved.
Regards,
Nick Gu - MSFT