RE: Trend False Positives
"Larry Seltzer" <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
Trend got back to me. I'm actually using PC-Cillin 2005, btw. Seems it has to do with messages with large numbers of attachments, and when PC-Cillin sees such a message (20 attachments in this case) it considers the message as possibly malformed, and therefore suspicious. The explanation it gives to the user gives none of these specifics, it just says that the message is possibly malicious. The Security-Basics digests must send the messages as attachments, and it's probably the busiest list I have in digest mode. The malformed message detector can be turned off globally with a registry hack, but not fine-tuned. Problem diagnosed, if not solved. Larry Seltzer eWEEK.com Security Center Editor http://security.eweek.com/ http://blog.ziffdavis.com/seltzer Contributing Editor, PC Magazine [email protected]