If a potentially dangerous process is recognized on a computer in the network, then the administrator is warned in different ways:
|
The process is listed
Reference is made in the yellow line at the end of the process list to potentially dangerous processes which were started after the scan that is being presented. This functionality is only available if the scheduling option At the start of a process has been set for the client computer.
|
in 
The process is registered in the process log (logbook). In this log, you can see all the past alerts that occurred.
|
The process is registered in the local event log of the computer workstation and is displayed with the Event Viewer eventvwr.exe or your system management software. The event ID is: 150 |
Specifying at what level the administrator is warned
| 1. | Click on  Configuration. |
| 2. | Define a new level of risk in the Warnings area. All processes with a higher risk ranking than this are now considered potentially hazardous.. |
Note
| • | You can classify a process as harmless. In that case you will no longer be warned in the future in this process . |