Solution | OPR / POLICY |
---|---|
PE_FLOXIF.SM-O | 11.127.00 |
PE_FLOXIF.D | 15.299.00 |
Behavior Monitoring (TMTD) | PA4734S |
Containment
- Check how many endpoints are affected by doing the following.
- Identify Infection sources by filtering through Source Host which can be done either on the pivot table or on the web portal.
Click the image to enlarge.
- Isolate the endpoints for cleanup.
- For a larger outbreak, Outbreak Prevention Policies can be utilized.
Cleanup
For Endpoints with functional and updated Security Software:
- Configure Real Time Scan, Scheduled Scan, Manual Scan, and Scan Now with the following Settings.
- Perform a network-wide scan.
For Isolated Endpoints or Endpoints without Functional AV Software:
- Option 1: ATTK Offline Clean Tool
- Option 2: Trend Micro Rescue Disk
- For Cleanup choose Scan for Security Threats.
Click the image to enlarge.
- Perform a Full Scan.
Click the image to enlarge.
- A message should appear once the files are cleaned. For files that are not cleaned, this can be deleted manually or sent to Trend Micro for analysis.
Click the image to enlarge.
- For Cleanup choose Scan for Security Threats.