[THIN] Re: OT: TREND Officescan false positive???

  • From: "Jim Kenzig Kenzig.com" <jkenzig@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Mon, 7 Feb 2005 08:37:36 -0800 (PST)

No we aren't seeing that with Trend SMB but it could be modified..you might 
want to compare the file size to the actual file on another system.
This virus drops a copy...
http://www.f-secure.com/v-descs/smibag.shtml
Jim

"Claus, Brian" <BClaus@xxxxxxxxxxxxx> wrote:
Anyone getting any false positive ID's on the following?

Infected file: C:\WINDOWS\System32\ATL.DLL

********************************************************
This Weeks Sponsor: ThinPrint, GmbH
Now available: .print Remote Desktop Printing Engine
for Microsoft Terminal Services
http://www.thinprint.com/dotprint/index.php?sh2&lc=1
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: