Event ID: 1117

ID

1117

Version

3.0

Message

Forefront Endpoint Protection has taken action to protect this machine from malware or other potentially unwanted software.

For more information, see the following:

• Name: <Threat name>
  
  
• ID: <Threat ID>
  
  
• Severity: Low, Medium, High, Severe
  
  
• Category: <Category description>
  
  
• Path: <Path>
  
  
• Detection Origin: Unknown, Local machine, Network share, Internet, Incoming traffic, Outgoing traffic
  
  
• Detection Type: Heuristics, Generic, Concrete, Dynamic Signature
  
  
• Detection Source: User, System, Real-time protection, IE Downloads and Outlook Express Attachments, Network Inspection System, Browser Help Object
  
  
• User: <Remediation User Name>
  
  
• Process Name: <Process in the PID>
  
  
• Action: Remove, Clean, Quarantine, Allow, Not Applicable
  
  
• Action Status: <Description of additional actions>
  
  
• Signature Version: <Definition version>
  
  
• Engine Version: <Antimalware Engine version>