Checking Virus Scan Status

Even if a virus scan has not generated an alert, you can check its status if it is a Scan Now or recurring scan.

When a virus scan detects a virus or other malware, it generates an event alert which is displayed on the Virus and Malware Event Alerts page. But sometimes it is useful to check the status of a scan, even if it has not generated any alerts. You can do this on the following pages:

Deployments and Tasks page: Displays the status of Scan Now tasks that have executed already or are scheduled to execute.

Endpoint Details page: The Virus and Malware tab displays the status of the last Scan Now or recurring scan that was run on a specific endpoint.

Viewing the Virus/Malware Details Page

To view detailed information on a detected virus or malware, navigate to the Virus/Malware Details page.

  1. Select Review > Virus and Malware Event Alerts.
    The Virus and Malware Event Alerts page opens. If a virus scan has detected viruses or malware, they will be displayed in the Virus/Malware column.
  2. Click the hyperlink for the virus or malware you want to investigate.
    The Virus/Malware Details page opens.

The Virus/Malware Details Page List

The Virus/Malware Details page gives detailed information on all the endpoints affected by a specific virus or malware.

The following table describes the information found in the list of affected endpoints. Each endpoint can be listed multiple times, depending on how many examples of the malware are infecting it.

Column

Description

Endpoint Name

The name of the endpoint where the virus or malware was detected.

IP Address

The IP address of the endpoint where the virus or malware was detected.

Alert Source

The type of scan that generated the alert:

  • Recurring Virus and Malware Scan
  • Real-time Monitoring Policy
  • Scan Now

Status

The alert status:

  • (Cleaned)
  • (Deleted)
  • (Not Cleaned)
  • (Quarantined)

Both Cleaned status and Deleted status use the same icon because in both cases the malicious code has been removed and no longer presents a danger.

Alert Message

The message related to the alert status:

  • Cleaned
  • Deleted
  • Not Cleaned
  • Quarantined

File Name

The name of the file in which the virus or malware was detected.

File Path

The file path of the file in which the virus or malware was detected.

Last Detected Date (Server)

The date and time the alert was generated (saved as server time).

You can collapse the display of any endpoint's details by clicking the arrow beside it. This is useful when an endpoint has many files infected with the same malware.