Monday, April 12, 2010

OSCE SP1 ; found encrypted as the action in malware log

q: I found "encrypted" as the result action in malware log for OSCE 10 with SP1

a: This is is a new feature in OfficeScan 10, where the virus logs will show an "encrypted" result. The "Encrypted" result happens when the Scan Engine (VSAPI) is unable to take action (quarantine, delete, rename) on a malware. Instead, the OfficeScan client will just encrypt the malware.

No comments: