Re: Frustrated with Trend CSM!
From: Merv Porter [SBS-MVP] (mwport_at_no_spam_hotmail.com)
Date: 08/06/04
- Next message: Steve Foster [SBS MVP]: "Re: By the way...."
- Previous message: Steve Foster [SBS MVP]: "Re: backup solution for sbs?"
- In reply to: Chester: "Frustrated with Trend CSM!"
- Next in thread: Lanwench [MVP - Exchange]: "Re: Frustrated with Trend CSM!"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 6 Aug 2004 17:43:24 -0500
Not an expert on Trend but I think what you're seeing may be normal. I
wonder if what you're seeing inhte reports are viruses that have been caught
and quarantined. DCS is separate from the actual virus detection pattern
file and is (or can be) deployed after the pattern file has detected a virus
and then done it's job of deleting it or quarantining what it can. At that
point, there may be remnants of a virus still on the server and/or client
machines. DCS can then be run to try to attempt to remove these.
Trend Damage Cleanup Server
http://www.cdg-group.com/go.exe?prodid=369
As for email viruses...Many viruses propagate by sending themselves to
people in the infected user's address book and thus appear to be sent from a
"friendly" source Enite address books can also be hijacked and sent to
external sources that can then start sending out viruses and malware as if
they are coming from "friendly" email addresses. Most often this happens
when people don't keep up with virus definitions (not necessarily you, but
the people you correspond with) are simply open all email without thinking.
Bottom line... Don't believe that mail is really coming from the email
address specified. If you're not expecting an email from someone, don't
immediately open it, especially if it contains an attachment you weren't
expecting. This is difficult to control, especially in a business
environment.
-- Merv Porter [SBS MVP] =================================== "Chester" <chester@NOSPAMprosoundusa.com> wrote in message news:%23697P0$eEHA.3988@tk2msftngp13.phx.gbl... > I have torn out my hair trying to understand how this program works. I guess > I've just missed the boat on this one. > > 1. Installed the program several months ago, and got it set to check for > updates hourly > 2. Installed the clients at the same time, and everything came up clean. > > Now, when I look at the console on the server, it keeps telling me that the > server has 50 infected files, and that one of the clients has 1 infected > file. So I use the "Damage Cleanup Service" on the server and on the client, > and NOTHING CHANGES!!! They DCS reports "no malware found" and when I do a > manual scan, it reports "No viruses found!" What is UP!?!?! Why can't I > grasp this!?! > > Any help from someone with Trend CSM would be VERY much appreciated. > > The reason I'm sure we have a virus is because we keep getting virus > notifications in our email from the server saying it has removed an > attachment. The strange thing is, those emails (which are being routed to > the users Junk Mail folder) are now showing as coming from people we know > and communicate with, but those people are not sending us email! > > Thanks for your help! > 3. > >
- Next message: Steve Foster [SBS MVP]: "Re: By the way...."
- Previous message: Steve Foster [SBS MVP]: "Re: backup solution for sbs?"
- In reply to: Chester: "Frustrated with Trend CSM!"
- Next in thread: Lanwench [MVP - Exchange]: "Re: Frustrated with Trend CSM!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
