Displaying Computers Infected by a Specific Malware

  • Article

Applies To: Forefront Endpoint Protection

You can use FEP reports to see an overview of antimalware status, malware alerts, and malware detections, filtered by Configuration Manager collections.

To display a list of computers infected by a specific malware

  1. In the Configuration Manager console, expand System Center Configuration Manager, expand Site Database, expand Computer Management, expand Forefront Endpoint Protection 2010, and then click Reports.

  2. Select Antimalware Activity Report, and then in the Actions pane, click Run. The Antimalware Activity Report opens displaying antimalware activity for the collection and time frame specified.

  3. Scroll down to the Malware Activity section, and click the malware of interest. The Malware Details Report opens, displaying information for the selected malware.

  4. In the Computer List section, you can see the list of computers infected by the malware you specified.