mcafee giving infected report

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi,
i am in technical support and have more than a thousand machines that i
attend to.I have been faced with a problem where the antivirus software we
use,Mcafee generates a report showing 200 machines to be infected, but when I
check thos particular machines the antivirus shows them to be clean.
I need your advice......please help.
Thanks
 
From: "afs" <[email protected]>

| hi,
| i am in technical support and have more than a thousand machines that i
| attend to.I have been faced with a problem where the antivirus software we
| use,Mcafee generates a report showing 200 machines to be infected, but when I
| check thos particular machines the antivirus shows them to be clean.
| I need your advice......please help.
| Thanks

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

There is a forum as well specifically for McAfee.

http://forums.mcafeehelp.com/index.php

I have a feeling you may be mis-interpreting the McAfee logs.

I assume that when you state "...Mcafee generates a report showing 200 machines to be
infected..." that this is a cebtralized report generated by ePO.

Please provide pertinent excerpts from said log.

You also stated; "...when I check thos particular machines the antivirus shows them to be
clean."

Please elaborate.
Are you looking at the local logs of each PC ?
Did you run a complete scan of each PC ?
Additionally, did you use the GUI scanner or the McAfee Command Line Scanner if you did
perform a scan ?

Please provide pertinent excerpts from a sampling of the affected platforms.
 
Thank You Dave...will follow our advice


Dave Patrick said:
You'll want to get in touch with MacAfee

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

afs said:
hi,
i am in technical support and have more than a thousand machines that i
attend to.I have been faced with a problem where the antivirus software we
use,Mcafee generates a report showing 200 machines to be infected, but
when I
check thos particular machines the antivirus shows them to be clean.
I need your advice......please help.
Thanks
Click to expand...
Click to expand...
 
Mr Lipman, I am so thankful you replied Because I have been going round in
circles at mcafee, i needed to elaborate more actually... We are using e
policy orchestrator 3.6 and yes the report is a centralised report generated
by the epo and as u rightly said i just scanned the infected machines and
they showed that the machines are not infected and free from
viruses.......and yet??
will be grateful for further advice
 
From: "afs" <[email protected]>

| Mr Lipman, I am so thankful you replied Because I have been going round in
| circles at mcafee, i needed to elaborate more actually... We are using e
| policy orchestrator 3.6 and yes the report is a centralised report generated
| by the epo and as u rightly said i just scanned the infected machines and
| they showed that the machines are not infected and free from
| viruses.......and yet??
| will be grateful for further advice

I'd have to see excepts of the ePO logs and the local PC VirusScan log.

I also need to know about WHAT was the infector (the McAfee name of the infector) and the
fully qualified name and path of the file(s) found to be infected on those 200 PCs.

There's just too little information to go on at present.
 
Yes Mr Lipman ,I'lll providee the information.As i am not presently in the
office i'll try and send them first thing...hope u'll be in touch ....it was
nice meeting you
 
From: "afs" <[email protected]>

| Yes Mr Lipman ,I'lll providee the information.As i am not presently in the
| office i'll try and send them first thing...hope u'll be in touch ....it was
| nice meeting you

The name is Dave. You don't have to be so formal. ;-)

I will monitor this thread or you can send me email. Just remove ~nospam~ from either or
both of the below...

[email protected]
[email protected]
 
Gee thanks so much.....i was in such a jam i really cant tell u how good it
felt to have advice....
thank u dave
 
Back
Top