.png)
Malware Status Conditions
Updated: December 17, 2012
Applies To: Windows Intune December 2012 Release
To learn why the Follow-up Needed or the Recently resolved status is being reported for a malicious software, or malware, instance on a computer, you can view the Current Status column for the malicious software instance in the Windows Intune administrator console. The current status of a malicious software instance is displayed on the Malware tab on the Properties page for the computer on which the software is reported, and on the Computers tab on the Properties page for the malicious software instance.
Follow-up Needed
In the Current Status column, conditions that generate the Follow-up Needed status are reported as shown in the following table.
| Status Condition | Description |
|---|---|
|
Malware active |
Windows Intune Endpoint Protection has not taken action on the malware at the time of reporting. This status will be automatically cleared when Endpoint Protection cleans the infected resources. |
|
Action failed |
Windows Intune Endpoint Protection was not successful in cleaning the infected resources. We recommend that you read about this malware on the Microsoft Malware Protection Center to learn how to manually remove this malware. |
|
Manual steps needed |
Windows Intune Endpoint Protection has cleaned the infected resources. We recommend that you read about this malware on the Microsoft Malware Protection Center, perform any recommended follow-up, and then run a full system scan on the computer. After a full system scan is run, Endpoint Protection will automatically clear this status. For information about running scans, see Running an Endpoint Protection Scan. |
|
Full scan needed |
Windows Intune Endpoint Protection has cleaned the infected resources. We recommend that you run a full system scan on the computer to ensure that it is clean. After a full system scan is run, Endpoint Protection will automatically clear this status. |
|
Restart needed |
Windows Intune Endpoint Protection has tried to clean the infected resources, but a computer restart is needed to complete the removal process. After a restart, Endpoint Protection will automatically clear this status. |
Recently resolved
In the Current Status column in the console, conditions that generate the Recently resolved status are as shown in the following table:
| Status Condition | Description |
|---|---|
|
Quarantined |
Windows Intune Endpoint Protection has quarantined the infected resources. |
|
Removed |
Windows Intune Endpoint Protection has deleted the infected resources. |
|
Cleaned |
Windows Intune Endpoint Protection has cleaned the infected resources. |
|
Ignored |
This malware instance is allowed on the computer. |
|
Malware not present |
This malware instance is not present on the computer. |
