Re: Frustrated with Trend CSM!
From: Chester (chester_at_NOSPAMprosoundusa.com)
Date: 08/09/04
- Next message: Marina Roos [SBS-MVP]: "Re: Not Receiving inbound email"
- Previous message: Joe: "Setup secure FTP site & bind to the internal nic"
- In reply to: Phil: "Re: Frustrated with Trend CSM!"
- Next in thread: Les Connor [SBS MVP]: "Re: Frustrated with Trend CSM!"
- Reply: Les Connor [SBS MVP]: "Re: Frustrated with Trend CSM!"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 9 Aug 2004 12:01:48 -0400
Thanks Phil, Lanwench, and Merv,
I did check the log, and what bothers me is there are several messages like
"Virus successfully detected, but infected file can neither be cleaned nor
quarantined"
and the other one that bugs me is "See scan result in compressed file :
NTFS_5131bc4801c47be600000235.EML"
The details show the virus name and things, but should I worry about these?
The log shows the path as being to the ..\Queue, but of course, they are
gone from there now.
Sorry if this all sounds elementary, I'm trying to get my head wrapped
around the security issues here.
Thanks for the help!
Chester
"Phil" <phil@phil.com> wrote in message
news:O9IhSWifEHA.2812@tk2msftngp13.phx.gbl...
> Chester,
>
> See reply inline
>
> Thanks,
> Phil
>
> "Chester" <chester@NOSPAMprosoundusa.com> wrote in message
> news:%23697P0$eEHA.3988@tk2msftngp13.phx.gbl...
> > I have torn out my hair trying to understand how this program works. I
> guess
> > I've just missed the boat on this one.
> >
> > 1. Installed the program several months ago, and got it set to check for
> > updates hourly
> > 2. Installed the clients at the same time, and everything came up clean.
> >
> > Now, when I look at the console on the server, it keeps telling me that
> the
> > server has 50 infected files, and that one of the clients has 1 infected
> > file. So I use the "Damage Cleanup Service" on the server and on the
> client,
> > and NOTHING CHANGES!!! They DCS reports "no malware found" and when I do
a
> > manual scan, it reports "No viruses found!" What is UP!?!?! Why can't I
> > grasp this!?!
>
> DCS only cleans up a computer that is actually infected. You need to
check
> the virus log for the clients/server that is infected and see what action
> has been taken. If they have been quarantined or deleted, then you have
> nothing to worry about. The status (the PC on fire icon) is associated
with
> the number of viruses that the computer has encountered and does not
> necessarily mean that the computer is currently infected. (That's why you
> need to check the virus logs) If you'd like to be able to track the
number
> of viruses and the source, etc. on the summary page, you need to leave
> everything as is. However if seeing the PC on fire icons are really
> bothering you, you must view the status of the client and click "Reset
Virus
> Count", or if there is more than one select the domain and click "Reset
> Virus Count".
>
> >
> > Any help from someone with Trend CSM would be VERY much appreciated.
> >
> > The reason I'm sure we have a virus is because we keep getting virus
> > notifications in our email from the server saying it has removed an
> > attachment. The strange thing is, those emails (which are being routed
to
> > the users Junk Mail folder) are now showing as coming from people we
know
> > and communicate with, but those people are not sending us email!
> >
>
> Someone is spoofing their addresses. I had someone internally here get
> spoofed and the email got sent to another user here which caused a little
> confusion for them. As long as the viruses are getting cleaned or removed
I
> would not worry about it.
>
> > Thanks for your help!
> > 3.
> >
> >
>
>
- Next message: Marina Roos [SBS-MVP]: "Re: Not Receiving inbound email"
- Previous message: Joe: "Setup secure FTP site & bind to the internal nic"
- In reply to: Phil: "Re: Frustrated with Trend CSM!"
- Next in thread: Les Connor [SBS MVP]: "Re: Frustrated with Trend CSM!"
- Reply: Les Connor [SBS MVP]: "Re: Frustrated with Trend CSM!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|