In my enviroment i have many file servers with many folders. In the last week happened that all the files *.exe, like orainst.exe or sqlrun.exe were renamed in orainst.exe.vir without moving it to the quarantine folder. I tried to query the database in order to understand if there is really a virus or it is only a positive false, but i found nothing
Can anyone help me?
My enviroment is epolicy orchestrator 4.0 patch 5 with about 3500 clients and 51 distributed repositories. The servers in witch the files were renamed has mcafee 8.7 enterprise, but only in the ORANT folder