srisknotcl
OfficeScan can display notification messages on client computers:
Immediately after Real-time Scan and Scheduled Scan detect virus/malware and spyware/grayware. Enable the notification message and optionally modify its content.
If a client computer restart is necessary to finish cleaning infected files. For Real-time Scan, the message displays after a particular security risk has been scanned. For Manual Scan, Scheduled Scan, and Scan Now, the message displays once and only after OfficeScan finishes scanning all the scan targets.
To notify users of virus/malware and spyware/grayware detections:
Networked Computers > Client Management
In the client tree, click the root domain icon 
to include all clients or select specific domains or clients.
Click Settings > Scan Settings > Real-time Scan Settings or Settings > Scan Settings > Scheduled Scan Settings.
Click the Action tab.
Select the following options:
Display a notification message on the client computer when virus/malware is detected
Display a notification message on the client computer when probable virus/malware is detected
If you selected domain(s) or client(s) in the client tree, click Save. If you clicked the root domain icon, choose from the following options:
Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.
To configure virus/malware notifications:
Notifications > Client User Notifications
Click the Virus/Malware tab.
Configure detection settings.
Choose whether to display:
Only one notification for all virus/malware related events
Separate notifications depending on the severity of virus/malware related events. The severity can be:
High: The client was unable to handle critical malware
Medium: The client was unable to handle malware
Low: The client was able to resolve all threats
Accept or modify the default messages.
To display a notification message if virus/malware originated from the client user's computer:
Select the check box under Virus/Malware Infection Source.
Specify an interval for sending notifications.
Optionally modify the default notification message.
This notification message displays only if you enable Windows Messenger Service. Check the status of this service in the Services screen (Control Panel > Administrative Tools > Services > Messenger).
Click Save.
To configure spyware/grayware notifications:
Notifications > Client User Notifications
Click the Spyware/Grayware tab.
Accept or modify the default message.
Click Save.
To notify clients of a restart to finish cleaning infected files:
Networked Computers > Client Management
In the client tree, click the root domain icon 
to include all clients or select specific domains or clients.
Click Settings > Privileges and Other Settings.
Click the Other Settings tab and go to the Restart Notification section.
Select Display a notification message if the client computer needs to restart to finish cleaning infected files.
If you selected domain(s) or client(s) in the client tree, click Save. If you clicked the root domain icon, choose from the following options:
Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.
See also: