So I'm trying to better understand how the "Infected" status works in SEPM 12.1. RU2. As an example if I go under the Monitors -> Computer Status I find one machine that reports "Infected". Looking at the details it appears that the file was on a removable drive and it's no longer plugged into that machine(hasn't been for about 4 months). How do I go about clearing that status so it doesn't come up on my reports anymore and I don't keep sending tickets to the Local MIS to clean a machine that is no longer infected?
Also, would you consider this to be the best approach for addressing "Infected" machines in the environment. Pull a report from the Monitors -> Computer Status for all "Infected" machines and create tickets to have additional scanning done on these machines with other AV suites?
Thanks,
Mike