Hitachi

JP1 Version 12 JP1/IT Desktop Management 2 Administration Guide


1.7.6 Checking the anti-virus status when a virus infection occurs

If a virus infection is detected among computers used in your organization, after the anti-virus product quarantines the virus, you need to check whether there is any problem with the anti-virus status and usage status of all the computers under your management.

By using JP1/IT Desktop Management 2, you can check the anti-virus status and usage status of each computer.

1. Check whether there is any problem with the computer where the virus was found.

Using JP1/IT Desktop Management 2, check the device information of the computer where the virus was found. If the computer has a problem such as illegal software installed on that computer, that problem might have caused the virus infection. In such a case, take appropriate measures.

2. Check the anti-virus status of the computers.

Check the anti-virus status of the computers in your organization by using the Antivirus Software Status report in JP1/IT Desktop Management 2.

By following the above procedure, you can check the anti-virus status in your organization.

Related Topics:

Organization of this subsection

(1) Checking whether there is any problem with the computer where the virus was found

If a virus is detected on a computer in your organization, that virus is quarantined by the anti-virus product. After the virus has been quarantined, by using JP1/IT Desktop Management 2, you need to check whether suspicious software leading to virus infection is used on that computer and whether the anti-virus status of that computer is the latest.

1. Receive notification from a user that the user's computer has been infected with a virus.

Receive notification of a virus infection from the user of the managed computer. Confirm with the user that the anti-virus product has quarantined and deleted the virus that infected the user's computer.

2. Display information about the relevant computer.

To check the usage status of the computer, using the Device Inventory view of the Inventory module, display the computer where the virus was found.

Tip

By using filtering conditions such as Operating System, User Name, Department, and Location, you can find a computer of interest more quickly.

3. Check whether suspicious software is installed.

If any software downloading a virus into a computer is installed on the target computer, another virus infection might occur. Using the Installed Software Details tab in the Device Inventory view, check the software installed on the target computer.

If any suspicious software is installed on the target computer, instruct the user to uninstall the software.

4. Check whether the anti-virus status is the latest.

If the anti-virus status of the target computer is not the latest, the computer might be infected by a virus again. Using the Security Details tab in the Device Inventory view, check whether the versions of the anti-virus product's engine and virus definition are the latest.

In addition, check information about the virus and how to handle the virus infection in the Web site of the anti-virus product, if necessary.

If there is any problem with the anti-virus status of the target computer, take appropriate measures.

5. Perform a virus scan.

To confirm that no file infected by the virus remains on the computer, instruct the user to perform a virus scan on the entire computer. If the scan result shows no problem, your checking operation is complete.

By following the above procedure, you can check whether there is any problem with the computer where the virus was found.

Related Topics:

(2) Checking the anti-virus status of computers

If a virus is detected on a computer in your organization, that virus is quarantined by the anti-virus product. After the virus has been quarantined, you need to check whether the anti-virus status of all the computers in your organization is the latest to prevent damage by the virus.

You can check the anti-virus status of the computers by using the Antivirus Software Status report. In the report, information such as whether the anti-virus software is installed and whether the virus definition file is the latest version is displayed.

If there is any problem with the anti-virus status, check the target computer, and then take appropriate measures.

To inform your superior, the security-related department, and others of the anti-virus status, output a report and submit it to the personnel or department concerned. You can print out a report by clicking the Print button in the Antivirus Software Status report.