Philadelphia Security User Group

With RU5, when a Mac has a virus hit there is now a icon showing a paper and magnifying glass next to the device in the SEPM in the "Health State" column. I can't seem to find an easy way to eliminate this icon even after the infected file has been deleted and a full scan is run on the system and comes back clean. Anyone know how to set the status back to the default clean state?

This should be happening automatically after it has been determined clean and SEPM processes it. How long has it been?

delete the client from SEPM and update the policy on the client . give it few mins , should clear it

Client reflect online on Server?

Full scan again and check it.

One is showing infected since 9/3 and multiple full scans have been run since then showing that it is clean. I have deleted this Mac from the console twice since then but still comes back showing infected. The other mac had a hit yesterday and I ran the power erase and it came back "rejected" (both SEPM and client are RU5) Currently running a full scan on second Mac.Both clients do show as Online on the server.

Update: Full Scan on second Mac came back clean but paper with magnifying glass still shows in console listing infection.

May want to get support to look at this....