Author Topic: SOA and Virus Notifications / Alerts  (Read 3944 times)

0 Members and 1 Guest are viewing this topic.

studio_two

  • Guest
SOA and Virus Notifications / Alerts
« on: December 11, 2012, 12:34:47 PM »
Hello,

What should I expect to see within the SOA Console when avast! detects a virus on a managed workstation?

During a routine scan yesterday, avast! "discovered" a virus, yet there is nothing to indicate this within the console - although a dialog box appeared on the workstation itself.

The only thing I see within SOA => Jobs => History is "Succeeded"; "Failed"; or "Suceeded with Warnings". Nothing to indicate the discovery of a virus.

I'm more than a little concerned by this, as I would like to see this information within the console (not just relying upon the users to advise me) - they may be reluctant to do this for obvious reasons.

Anyone have any thoughts on this? Maybe I'm missing something in the settings...

Thanks in advance,
Stephen

Offline Infratech Solutions

  • Avast Reseller
  • Super Poster
  • *
  • Posts: 2397
  • Mayorista e integrador de Avast en España
    • Ciberseguridad Avast para empresas y MSPs en España.
Re: SOA and Virus Notifications / Alerts
« Reply #1 on: December 11, 2012, 04:15:08 PM »
You can see the reports under: Reports -> Shields log or Reports -> Scan log
« Last Edit: December 11, 2012, 04:33:15 PM by Edj »

studio_two

  • Guest
Re: SOA and Virus Notifications / Alerts
« Reply #2 on: December 11, 2012, 05:18:07 PM »
Ah, Excellent!

I also spotted these "Expert" Settings in the FAQ - now getting alerts through my email.

Quote
How can i get email alerts back?
http://forum.avast.com/index.php?topic=82263.0
This comes from VLK

avastcfg://avast5/Common/NetAlert            SMTP:yourname@domain.com
avastcfg://avast5/Communication/SMTPFrom     from_address@domain.com
avastcfg://avast5/Communication/SMTPPort     25
avastcfg://avast5/Communication/SMTPServer   yoursmtpserver.domain.com

Please note that this change becomes effective only after the shields are restarted (e.g. computer rebooted).
« Last Edit: January 23, 2013, 12:47:41 PM by studio_two »

studio_two

  • Guest
Re: SOA and Virus Notifications / Alerts
« Reply #3 on: January 23, 2013, 12:53:17 PM »
I received the following email notification regarding an email virus:

Quote
avast! [MKXP2008]: File "Mail\Inbox\<Subj: T-Mobile MMS message has arrieved>\picture_{SYBOL}.zip|>picture_FPO83G.jpeg.exe" is infected by "Win32:Filename-A [Susp]" virus.
"Mail Shield" task used
Version of current VPS file is 130122-1, 22/01/2013

However, I can't see anything to state how avast! dealt with the issue (or if the machine is compromised in any way).

Any thoughts?

Kind regards,
Stephen

ITG

  • Guest
Re: SOA and Virus Notifications / Alerts
« Reply #4 on: February 11, 2013, 07:18:31 AM »
I too have the same issue that the OP has.  I have not received any data in the reports section of the SOA console...  This seems like a big oversight or something isn't set right.  Even if the machine is clean, I'd expect that we should still be getting some useful information such as start/end times of the scan to determine if a specific machine is taking longer than normal to scan.

Am I missing something with the SOA and its reporting?  Only have 1 server and 13 machines, nothing fancy.  OP, did you managed to get reports inside the console, not just the emails?