[For your protection, some features and settings discussed in this documentation may be controlled by your security administrator.]

If Microsoft Forefront Endpoint Protection 2010 detects malicious software or potentially unwanted software on your computer (either when monitoring your computer using real-time protection or after running a scan), it notifies you about the detected item by displaying a notification message in the bottom right-hand corner of your screen.

The notification message includes a Clean computer button and a Show details link that lets you view additional information about the detected item. Click the Show details link to open the Potential threat details window to get additional information about the detected item. You can now choose which action to apply to the item, or click Clean computer. If you need help determining which action to apply to the detected item, use the alert level that Forefront Endpoint Protection assigned to the item as your guide (for more information see, Understanding alert levels).

Alert levels help you choose how to respond to viruses, spyware, and other potentially unwanted software. While Forefront Endpoint Protection will recommend that you remove all viruses and spyware, not all software that is flagged is malicious or unwanted. The following information can help you decide what to do if Forefront Endpoint Protection detects potentially unwanted software on your computer.

Depending on the alert level, you can choose one of the following actions to apply to the detected item:


If you choose Allow for an item, such as software, Forefront Endpoint Protection will stop alerting you to risks that the software might pose to your privacy or to your computer. Therefore, add software to the allowed list only if you trust the software and the software publisher.