Jump to content

On the Dashboard, one "Infected". Now what?


Recommended Posts

On the cloud console dashboard, Infected: 1 . Now what?  Where to go to see what's still showing as "infected"?  The only place I found, which would be highly inconvenient as the deployment grows, is under the "Detections" left pane item, scrolling through ALL of the entries.  Under Action Taken, some were "quarantined", some "blocked", and only one was "Found", just a registry value, "PUM.Optional.DisableShowMyComputer" , "HKU\S-1-5-21-2342763795-823332892-3551160719-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|START_SHOWMYCOMPUTER".  I'm pretty sure it is benign.  Yet there's nothing to click on to allow it for all endpoints like the old Enterprise for Business product.

Link to post
Share on other sites

Added info:  I added a new endpoint (that was getting a lot of detections and quarantines in the old product), and submitted a scan+quarantine.  Now in the dashboard I have 2 "Infected".  Four items were found and quarantined on this new endpoint.  Nothing else occurred in the scan apparently - no "Found" or "Blocked". 

So if all four items the scan found were quarantined, why does the "Infected" count in the dashboard increment up?

Link to post
Share on other sites
  • Staff

Found means a detection was found but no action took place - this happens when you use scan and report on-demand scan, and for scheduled scans if you do not have the quarantine threats automatically option turned on in the schedule entry.

Quarantined means a detection was found by the realtime or the scanner and the object was quarantined.

Blocked means the web blocker blocked a connection attempt to a known malicious IP.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.