How to send LANDesk an infected or suspicious file

created by LDSupport on Nov 20, 2007 8:55 AM, last modified by cplatero on May 22, 2014 2:03 PM

Version 22

Description

Sometimes a virus shows up that does not have a definition yet. This is true for all viruses when they are first written. These are called "zero day" viruses.

In order for a definition to be created, the virus must be reported and sent to us immediately.

How to Report and Send an Infected or Suspicious File

If there is a file(s) that is identified as suspicious, before submitting the file(s) for analysis make sure that all infected machines are scanning with the latest definition files. Once all machines have been scanned with the latest definition files then follow the steps outlined below to have the infected files analyzed.

1. Collect the infected virus file(s) and compile them into a password protected .ZIP file.
   
2. Compile the infected file(s) into a password protected .ZIP file.