Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 Trend Micro Officescan,TMCM

views
     
TSdoublef
post Mar 16 2007, 11:05 PM, updated 19y ago

Getting Started
**
Junior Member
252 posts

Joined: Feb 2005


did anyone use this on their company?

to many uncleaned or undeleted threat...

who has experience about this?

i feel trend micro not so good to managed enterprise...
edministrator
post Mar 17 2007, 05:36 PM

Regular
******
Senior Member
1,940 posts

Joined: Nov 2004
From: Soviet Sarawak


on the contrary, my company is using this and as an administrator i find this antivirus suite very comprehensive, and especially easy to deploy and manage. the entire suite makes my life easier, enabling me to monitor daily viruses infections over the network and generates report for evaluation. licensing fees are reasonable too.

regarding your uncleaned or undeleted threat, I believe it might be the workstations are infected with applications that downloads the trojans/virus once internet connection is detected or it is from unprotected network infections. you'll need to find out the solution from their database to totally remove the problem. one good example is 'rontokbro' that requires manual removal.

as long as TMCM detected the threat, it will delete/quarantine the files. you should be more worried if your antivirus does not pick up any trojans/virus over a long time especially when your network is exposed to the internet.

This post has been edited by edministrator: Mar 17 2007, 05:38 PM
natakaasd
post Mar 17 2007, 09:48 PM

Look at all my stars!!
*******
Senior Member
2,188 posts

Joined: Nov 2005


QUOTE
as long as TMCM detected the threat, it will delete/quarantine the files. you should be more worried if your antivirus does not pick up any trojans/virus over a long time especially when your network is exposed to the internet.

Nice work. Thumbs up. Wary when nothing comes out of the reports. Cheers! cheers.gif
hkpoh
post Mar 19 2007, 11:16 AM

Casual
***
Junior Member
311 posts

Joined: Jul 2005
From: Negeri Sembilan


I have been using it too, and I would say a thumbs up for TMCM. Easy to manage all the users.
TSdoublef
post Mar 20 2007, 01:36 AM

Getting Started
**
Junior Member
252 posts

Joined: Feb 2005


but sometime,

when i see every day got many PC i must remove it manually,

i will asking my self...

why officescan detected the threat but cannot clean it,

do worth my money?
hkpoh
post Mar 20 2007, 11:37 AM

Casual
***
Junior Member
311 posts

Joined: Jul 2005
From: Negeri Sembilan


If I am not mistaken, you can choose either quaranteen or delete from the option. As a admin, you should quaranteen it, because whenever things happen to your user pc, then you might be able to trace the virus and find a good solution for it, so deleting might cause you more time to finding the virus.

just my way for handling.
TSdoublef
post Mar 20 2007, 07:55 PM

Getting Started
**
Junior Member
252 posts

Joined: Feb 2005


.....

if it cant delete how come can quarantine?

do u have effect by

worm_rbot.ada (files regstrmon.exe)

WORM_VB.CLN (taskmgr.exe)

WORM_SIWEOL.A (RAVMONE.EXE)

TROJ_SEBABKI.A (bfxtray.exe)

then u know what mean by detected but cant do nothing.....
natakaasd
post Mar 20 2007, 09:28 PM

Look at all my stars!!
*******
Senior Member
2,188 posts

Joined: Nov 2005


@doublef,You misinterpreted what hkpoh mentioned.

He mentioned that quarantining the Malware(virus in this case) is only to aid research on the particular virus in the future(for the Tech Support in the company). He just DISCOURAGES Deleting the file immediately. He never mentioned unable to delete.

If I misinterpreted myself, allow me to extend my apologies. wink.gif

Cheers!
hkpoh
post Mar 21 2007, 11:18 AM

Casual
***
Junior Member
311 posts

Joined: Jul 2005
From: Negeri Sembilan


yup, natakaasd is right. After you know what kind of virus to your company and it's expired, then you can delete those known virus.

Thank natakaasd to explain in more detail.
TSdoublef
post Mar 21 2007, 11:57 AM

Getting Started
**
Junior Member
252 posts

Joined: Feb 2005


oooo...

the problem is that files also cannot been quarantined..
natakaasd
post Mar 21 2007, 03:42 PM

Look at all my stars!!
*******
Senior Member
2,188 posts

Joined: Nov 2005


QUOTE
Thank natakaasd to explain in more detail.

Welcome. It is my pleasure. laugh.gif

QUOTE
the problem is that files also cannot been quarantined..

Is the file in use? Check Task Manager. Kill Process. Quarantining after that should be a breeze.

Cheers!
TSdoublef
post Mar 22 2007, 08:49 AM

Getting Started
**
Junior Member
252 posts

Joined: Feb 2005


maybe file in use...

but if 100 PC infected must i go to 100 PC and kill process?

if let say that PC is in Johor... must i go to johor to just to end task?



:>


natakaasd
post Mar 22 2007, 09:26 AM

Look at all my stars!!
*******
Senior Member
2,188 posts

Joined: Nov 2005


QUOTE(doublef @ Mar 22 2007, 08:49 AM)
maybe file in use...

but if 100 PC infected must i go to 100 PC and kill process?

if let say that PC is in Johor... must i go to johor to just to end task?
:>
*
LOL. That's a rather cute way of you explaining your situation. No Offense.

Heard of TASKKILL Command? It can Kill Tasks on Remote Computers. Should be able to settle your problem. Just have a VPN and you should be very safe in doing it. laugh.gif

About 100 Computers. Batch Files should be your best bet. Little do I know about your computer network for your company, but hopefully these suggestion can help.

Cheers!
hkpoh
post Mar 22 2007, 11:48 AM

Casual
***
Junior Member
311 posts

Joined: Jul 2005
From: Negeri Sembilan


if the files cant be delete or quaranteen, then send a copy of that files to TMCM centre, they might help you with a new virus update.

From what I can remembered, I have send 1 new virus pattern to TMCM about 4 years ago, within 24 hours, TMCM updated my TMCM server to a new virus pattern and wala..... all the virus has been caught.

I am not trying to be hero, but at least I can contribute something to IT world.

 

Change to:
| Lo-Fi Version
0.0196sec    0.73    5 queries    GZIP Disabled
Time is now: 22nd December 2025 - 09:16 PM