RE: Trend False Positives

"Larry Seltzer" <[email protected]>
Newsgroups gmane.comp.security.virus
Message-ID <[email protected]>
Trend got back to me. I'm actually using PC-Cillin 2005, btw. Seems it has
to do with messages with large numbers of attachments, and when PC-Cillin
sees such a message (20 attachments in this case) it considers the message
as possibly malformed, and therefore suspicious. The explanation it gives to
the user gives none of these specifics, it just says that the message is
possibly malicious. The Security-Basics digests must send the messages as
attachments, and it's probably the busiest list I have in digest mode. The
malformed message detector can be turned off globally with a registry hack,
but not fine-tuned.

Problem diagnosed, if not solved.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.ziffdavis.com/seltzer
Contributing Editor, PC Magazine
[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.