Re: AW: Trophie worker processes dying at a high rate: am I alone?

On Tue, Aug 17, 2004 at 05:49:48PM +0200, Vanja Hrustic wrote:
> On Tue, 17 Aug 2004 17:40:04 +0200
> Stephane Lentz <[email protected]> wrote:
> 
> > > Does it crash for others, using 958 pattern?
> >
> > To all PATTERN 958 IS NOT WORKING. 
> > Remove it and use 957 instead until a new one is released
> > Complain to Trend if you can ... Their service is as good
> > as before ...
> 
> Right. I've tried 959 ("controlled release"), and Trophie loaded it okay.
> It does, indeed, seem 958 is invalid pattern.
> 
> Vanja

Vanja, 

you're right 959 is a better choice as it identifies TROJ_MULDROP.D .

To all, 

what is your feeling about Trend lately regarding to virus patterns release
and support ? Anybody willing to create a Trend user distribution list to
exchange tips/feelings ?

To avoid in the futur the problem experienced with pattern 958, you can 
try to run vscan in your script before activating/pushing a new pattern : 

with pattern 958 
# vscan  
Virus Scanner v3.1, VSAPI v7.000-1011
Trend Micro Inc. 1996,1997
read pattern failed,rc -3
        -3: invalid pattern file
        -4: pattern file not found
        -83: incorrect pattern format
        -96: read error
        -98: out of memory
# echo $?
253

With a normal pattern 
#vscan
Virus Scanner v3.1, VSAPI v7.000-1011
Trend Micro Inc. 1996,1997
        Pattern version 959
        Pattern number 69945
No scan target specified!! do nothing.
# echo $?
0

Checking exit code of vscan (exit code : 0) could be a good test. 


Regards, 

SL/

PS : do any of you have bought Premium contract support ? How good is it ? 
---
Stephane Lentz 
AES TSC