Re: Frustrated with Trend CSM!

From: Chester (chester_at_NOSPAMprosoundusa.com)
Date: 08/09/04


Date: Mon, 9 Aug 2004 12:01:48 -0400

Thanks Phil, Lanwench, and Merv,

I did check the log, and what bothers me is there are several messages like
"Virus successfully detected, but infected file can neither be cleaned nor
quarantined"
and the other one that bugs me is "See scan result in compressed file :
NTFS_5131bc4801c47be600000235.EML"

The details show the virus name and things, but should I worry about these?
The log shows the path as being to the ..\Queue, but of course, they are
gone from there now.

Sorry if this all sounds elementary, I'm trying to get my head wrapped
around the security issues here.

Thanks for the help!

Chester
"Phil" <phil@phil.com> wrote in message
news:O9IhSWifEHA.2812@tk2msftngp13.phx.gbl...
> Chester,
>
> See reply inline
>
> Thanks,
> Phil
>
> "Chester" <chester@NOSPAMprosoundusa.com> wrote in message
> news:%23697P0$eEHA.3988@tk2msftngp13.phx.gbl...
> > I have torn out my hair trying to understand how this program works. I
> guess
> > I've just missed the boat on this one.
> >
> > 1. Installed the program several months ago, and got it set to check for
> > updates hourly
> > 2. Installed the clients at the same time, and everything came up clean.
> >
> > Now, when I look at the console on the server, it keeps telling me that
> the
> > server has 50 infected files, and that one of the clients has 1 infected
> > file. So I use the "Damage Cleanup Service" on the server and on the
> client,
> > and NOTHING CHANGES!!! They DCS reports "no malware found" and when I do
a
> > manual scan, it reports "No viruses found!" What is UP!?!?! Why can't I
> > grasp this!?!
>
> DCS only cleans up a computer that is actually infected. You need to
check
> the virus log for the clients/server that is infected and see what action
> has been taken. If they have been quarantined or deleted, then you have
> nothing to worry about. The status (the PC on fire icon) is associated
with
> the number of viruses that the computer has encountered and does not
> necessarily mean that the computer is currently infected. (That's why you
> need to check the virus logs) If you'd like to be able to track the
number
> of viruses and the source, etc. on the summary page, you need to leave
> everything as is. However if seeing the PC on fire icons are really
> bothering you, you must view the status of the client and click "Reset
Virus
> Count", or if there is more than one select the domain and click "Reset
> Virus Count".
>
> >
> > Any help from someone with Trend CSM would be VERY much appreciated.
> >
> > The reason I'm sure we have a virus is because we keep getting virus
> > notifications in our email from the server saying it has removed an
> > attachment. The strange thing is, those emails (which are being routed
to
> > the users Junk Mail folder) are now showing as coming from people we
know
> > and communicate with, but those people are not sending us email!
> >
>
> Someone is spoofing their addresses. I had someone internally here get
> spoofed and the email got sent to another user here which caused a little
> confusion for them. As long as the viruses are getting cleaned or removed
I
> would not worry about it.
>
> > Thanks for your help!
> > 3.
> >
> >
>
>



Relevant Pages

  • Re: Why linux is less prone to viruses
    ... hardly anyone bothers with Linux viruses - security by obscurity. ... There isn't a single linux virus in the wild. ... Because no one bothers. ...
    (comp.os.linux.misc)
  • The Truth About AIDS. Biological Warfare at is finest
    ... AIDS was created in a test tube and released into the population. ... Contrary to widespread speculations that human AIDS viruses arose from ... National Cancer Institute researchers noted that "only one virus ... virus RNA, associated with leukemia and sarcoma development, and ...
    (rec.org.mensa)
  • Re: WHO: Swine Flu Could Trigger Global Pandemic
    ... all worked up over the right of humans to temporarily camp in The ... Its a natural process, viruses are able ... sense of what a virus is and how it works. ... host as it is replicating, and transfer this genetic information to a ...
    (alt.gathering.rainbow)
  • Re: I switched to Firefox because--Solved
    ... Mac OS 9 and earlier had some virus problem, but none so far for Mac OS ... Earlier Mac viruses do not impact Mac OS X. ... > was AutoStart 9805, the first known Macintosh worm, which originated in Asia ...
    (microsoft.public.windowsxp.general)
  • Re: GAH! Pandemic fears excuse for power grab!
    ... INFLUENZA PANDEMICS AND OUTBREAK OF H5N1 VIRUS IN HONG KONG IN 1997 ... Origin of Pandemic Viruses That Emerged in the 20th Century ... Four human influenza pandemics have occurred in this century. ... involve genes encoding HA (high cleavability due to multiple basic amino ...
    (rec.martial-arts)