Accedi
 
HomeLibraryRisorseFormazioneDownloadSupportoCommunityForumBlog
Risorse per professionisti IT >
> 
> 
FSC Client Security has detected that the computer has been infected several times by the following threat:

Answered FSC Client Security has detected that the computer has been infected several times by the following threat:

  • martedì 15 novembre 2011 08:50
     
     
    Registrati per votare
    0

    Dears

    I am new to FSC, we have FSC Server installed, when i open the MOM Conole go to Alerts under All Alerts Node - i have a lot of this alert

    Security Issue: Security has detected that the computer has been infected several times by the following threat: &

    Security Issue: Client Security has detected that the computer is very infected.
     when I open the links which are provided by these alerts the action taken is clean and some of them mentioned Detection Type: Concrete and Status is Suspend

    Could anyone explain what does Concrete and Suspend means and if there are any action i have to do, could you please advice me


    • Modificato A. Al-Haffar martedì 15 novembre 2011 08:53
    •  
     

Tutte le risposte

  • giovedì 17 novembre 2011 07:19
    Moderatore
     
     Con risposta
    Registrati per votare
    0

    Hi,

    Thank you for your post.

    It's normal.
    When FCS detects malware on your system it will immediately suspend the malware.
    Then FCS waits for 10 minutes before taking an default action, unless the user takes action within the 10 minutes.

    Testing FCS antimalware detection with your own library

    Another scenario, action may not be automatically taken in a scheduled scan. In this case, please patch KB976668.

    Issue 3
    Generically or heuristically found malware that is detected by a scheduled scan is suspended. However, action may not be automatically taken upon the malware.
    Resolution
    After you apply this update, all malware detected in a scheduled scan is automatically taken action upon regardless of the detection type (concrete, generic, or heuristic) when a Forefront Client Security policy is deployed.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards,
    Rick Tan

    • Contrassegnato come risposta Rick TanModerator mercoledì 23 novembre 2011 01:23
    •