FSC Client Security has detected that the computer has been infected several times by the following threat:
martedì 15 novembre 2011 08:50
I am new to FSC, we have FSC Server installed, when i open the MOM Conole go to Alerts under All Alerts Node - i have a lot of this alert
Security Issue: Security has detected that the computer has been infected several times by the following threat: &
Security Issue: Client Security has detected that the computer is very infected.
when I open the links which are provided by these alerts the action taken is clean and some of them mentioned Detection Type: Concrete and Status is Suspend
Could anyone explain what does Concrete and Suspend means and if there are any action i have to do, could you please advice me
- Modificato A. Al-Haffar martedì 15 novembre 2011 08:53
Tutte le risposte
giovedì 17 novembre 2011 07:19Moderatore
Thank you for your post.
When FCS detects malware on your system it will immediately suspend the malware.
Then FCS waits for 10 minutes before taking an default action, unless the user takes action within the 10 minutes.
Another scenario, action may not be automatically taken in a scheduled scan. In this case, please patch KB976668.
Generically or heuristically found malware that is detected by a scheduled scan is suspended. However, action may not be automatically taken upon the malware.
After you apply this update, all malware detected in a scheduled scan is automatically taken action upon regardless of the detection type (concrete, generic, or heuristic) when a Forefront Client Security policy is deployed.
If there are more inquiries on this issue, please feel free to let us know.
- Contrassegnato come risposta Rick TanModerator mercoledì 23 novembre 2011 01:23