locked
repeated malware alerts RRS feed

  • Question

  • I subscribed to an alert in SCCM 2012

    Configuration Manager Repeated Malware Detected Alert: Repeated malware detection 

    It says on the bottom of the email that there will be no additional alerts if there are no new infections found in next 24 hours.  However, I'm getting an email every 5 minutes for the same mail.  The number of infections is going up though.  Any suggestions how to configure this so that it doesn't send an email every 5 minutes?

    Tuesday, February 12, 2013 10:38 PM

Answers

  • At this point, I would recommend that you contact CSS for support. They are the ones that can work with you to get this fixed.


    http://www.enhansoft.com/

    • Proposed as answer by NPherson Saturday, March 9, 2013 4:28 PM
    • Marked as answer by Garth JonesMVP Saturday, March 16, 2013 2:20 PM
    Saturday, March 9, 2013 4:17 PM

All replies

  • have you configured alerts on multiple collections ? or just one, is it the same infection info mail you are receiving ?


    Step by Step Configuration Manager Guides > 2012 Guides | 2007 Guides | I'm on Twitter > ncbrady

    Wednesday, February 13, 2013 9:55 AM
  • I have the alert configured for one collection All Desktop and Server Clients. But I may have other collections that I'm monitoring.   It is the same infection.  The date/time of detection changes, like every 5 minutes I get the same alert from the same desktop in the same collection for the same malware.  
    Wednesday, February 13, 2013 6:16 PM
  • doesn't sound right, is this RTM or SP1 ? have you asked your mail provider if they can see where the mails are coming from ?


    Step by Step Configuration Manager Guides > 2012 Guides | 2007 Guides | I'm on Twitter > ncbrady

    Wednesday, February 13, 2013 8:49 PM
  • It's RTM.

    The email alert is being generated or coming from our SCCM site server to our Exchange server.... If that is what you are asking.  

    Wednesday, February 13, 2013 8:52 PM
  • Yes, I know this is an old post, Just cleaning up un-answer posts. Did you figure this out?


    http://www.enhansoft.com/

    Saturday, March 2, 2013 3:22 PM
  • Not really, I deleted the alert for now.
    Saturday, March 2, 2013 3:40 PM
  • At this point, I would recommend that you contact CSS for support. They are the ones that can work with you to get this fixed.


    http://www.enhansoft.com/

    • Proposed as answer by NPherson Saturday, March 9, 2013 4:28 PM
    • Marked as answer by Garth JonesMVP Saturday, March 16, 2013 2:20 PM
    Saturday, March 9, 2013 4:17 PM