Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Trend Micro VirusWall cannot determine attachment type

  
   Security Forums (Home) -> General Discussions RSS
Next:  same sourc? sobig  
Author Message
C.Innocenzi

External


Since: Sep 03, 2003
Posts: 1



(Msg. 1) Posted: Wed Sep 03, 2003 6:56 am
Post subject: Trend Micro VirusWall cannot determine attachment type
Archived from groups: alt>comp>anti-virus (more info?)
Hello,

we have a Linux box (Red Hat 7.3) with Virus Wall 3.8 installed, Virus
Scanner v3.1, VSAPI v6.510-1002, pattern file 624 (as of today).

We have noticed the following message in our log file when the engine
scans either the message body or the attachments:

The target file can not be classified by VSAPI

and therefore the scan engine passes the entire message.

For example:

09/03/2003 00:07:20 smtp[14538]: smtp[199694]: connection from
127.0.0.1
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: from=, size=3651l,
nrcpts=1, msgi
d=<xxxx>, connect_from=127.0.0.1
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: mail from a.DeleteThis@b.com, to
y.DeleteThis@z.com
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: scanning inbound file
email-body
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: The target file can not
be classi
fied by VSAPI.
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: email-body contains no
virus
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: scanning whole file
smtpWl27gtf-14538
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: The target file can not
be classi
fied by VSAPI.
09/03/2003 00:07:20 smtp[14538]: smtp[199694]: mail delivered from
a.DeleteThis@b.com to y.DeleteThis@z.com

We would like to know if such behavior is correct.

Thank you for your help.

C.Innocenzi

 >> Stay informed about: Trend Micro VirusWall cannot determine attachment type 
Back to top
Login to vote
fasfdas

External


Since: Sep 06, 2003
Posts: 2



(Msg. 2) Posted: Wed Sep 03, 2003 7:16 pm
Post subject: Re: Trend Micro VirusWall cannot determine attachment type [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
We would need to see the raw message to tell, I think. You should check the
VirusWall documentation to see what it says.

 >> Stay informed about: Trend Micro VirusWall cannot determine attachment type 
Back to top
Login to vote
Nick FitzGerald

External


Since: Jul 03, 2003
Posts: 179



(Msg. 3) Posted: Thu Sep 04, 2003 10:15 pm
Post subject: Re: Trend Micro VirusWall cannot determine attachment type [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
"C.Innocenzi" <c.innocenzi.TakeThisOut@virgilio.it> wrote:

> we checked our config file and indeed we have that parameter set:
> whole_file_scan=yes
>
> We also have the following parameter set:
> level=scanall
>
> which means that the engine has to scan all traffic and not just some extensions.
>
> We updated the pattern file tonight but we still get the message.

I'd suggest that you call their tech support folks ASAP then...

One of the "problems" having a virus-scanning Email gateway can produce is an
increased level of optimism in your users -- the old "it got past the gateway
scanner so must be safe" foolishness. Thus, a gateway that suddenly appears
to not be able to scan traffic it ought to be scanning can be especially
problematic...


--
Nick FitzGerald
 >> Stay informed about: Trend Micro VirusWall cannot determine attachment type 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
webshield e500 and trend interscan viruswall comparison - Hi guys we are using trendmicro's interscan viruswall with emanager plugins) for scanning our incoming and outgoing smtp traffic, but now we are planning to replace it with the NAI's webshield e500 appliance but i have no experiences with any..

Trend Micro PC-cilion registration - I have purchased and attempted to register Trend Micro Internet Security 2004. The on-line registration does not have the proper amount of empty fields for my registration number. I have contacted Trend Micro on several occasions and I am getting no..

trend micro error message - I just got trend micro internet security. When I try to scan any drive on my system I get a popup window that says "there must be at least one file to scan and the file must be accessible. Specify another folder or file(s) and try again." D...

Trend Micro Offers New Antivirus Security for Nintendo Gam.. - Free Trial of New Protection for Gaming Devices Available In Time For Summer Recess FOR IMMEDIATE RELEASE Cupertino, CA - April 1, 2005 - Trend Micro, Inc. (TSE: 4704, NASDAQ: TMIC), a leader in network antivirus and Internet gaming security software..

Curious about what type this might be? - Got this in my email but Norton didn't detect anything nor did my server block it. Just wondering if this might have been a virus? I did not open it! The email was 30kb. Thanks for any answers...
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]