How do I find and disable a virus in the Integrated File System on the AS/400? (NETIQKB39768)

  • Document ID:7739768
  • Creation Date:02-Feb-2007
  • Modified Date:08-Oct-2007
    • Micro Focus Products:
      Security Solutions for iSeries

Resolution

goal
How do I find and disable a virus in the Integrated File System on the AS/400?

fact
VigilEnt Security Agent for iSeries 7.5

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fix

Refer to the following steps to find and disable a virus on the IFS:

  1. Using a powerful profile, whose special authorities include *ALLOBJ or *SECADM, map a drive to the IFS from any PC.
  2. Using your antivirus software, scan the IFS for the infected object.
  3. If an infected object is found, record the path for reference.
  4. From an AS/400 command line, run the RRM Object Report by Object and identify the users who have accessed the infected files.
  5. Find and record all entries with an objet path that matches the path of the infected file.
  6. Give your network support group the list of infected computers so that those computers can be cleaned.


Additional Information

Formerly known as NETIQKB39768