cancel
Showing results for 
Search instead for 
Did you mean: 

How to get a report of computers still infected?

Hi Community, I am using ePO 4.0 with VSE 8.7i and I would to have a report of computers still infected. I created one by filtering events with the descprition field containing "failded" or "impossible", the product name "VirusScan" and Event category belonging to malwares. But I m not really convinced that is the right way to do it. Would anyone have different ways to check which computers are still infected?

Thanks in advance

Ce message a été modifié par: matteoP on 13/12/10 05:45:57 CST
4 Replies
jj4sec
Level 10
Report Inappropriate Content
Message 2 of 5

Re: How to get a report of computers still infected?

use the "threat handled" parameter and select "equals" "false"

Re: How to get a report of computers still infected?

Thanks for your answer

Re: How to get a report of computers still infected?

Hello,

Attached you will find some queries that should help you. You can import them in your ePO and also put them in a new Dashboard.

Monitoring Threat Sources of last 24 hours (who is spreading malware to your network) and also all of the 'not handled' infections are things that you should review constantly.

Regards,

Bruno

Highlighted
Reliable Contributor Nielsb
Reliable Contributor
Report Inappropriate Content
Message 5 of 5

Re: How to get a report of computers still infected?

Thanks for your queries.

And is it possible to run a query on a specific container in the System Tree?

For example on "Country A", or "Country B"

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community