Attachments --> NETSKY.P

Hi!

We have a problem. Using TRendmicro Scanmail with latest pattern files/scanengines, netsky.p viruses still keep coming in.

Even with email filtering option it still comes through.

The problem is obvious. I don’t want the viruses to come in.

I did some checking and i saw that email messages come with “invisible” attachments (icon in Inbox view) eventhough the message size is correct for the virus.

Only when i try to forward the message Scanmail can detect it and the attachment is shown.

My question is… HOW COME the attachment isn’t shown and how to correct the problem? If it can be corrected. We’re waiting for the answer from TrenMicro.

Will keep you updated.

Thank you in advance!

Subject: Attachments → NETSKY.P

Trend version?

I ask because there was an issue in an earlier version than the one we use where a message using deliberately malformed MIME could bypass the scan on the way in. Fowarding these messages internally, the scan was able to spot and strip the viral attachment.

The bug was fixed some time ago and I have not recently seen an example of a viral message using malformed MIME that Trend has not successfully stopped.

Subject: RE: Attachments → NETSKY.P

Tnx… Scanmail version is 2.6, engine version 7.0, pattern file 851.

Subject: RE: Attachments → NETSKY.P

Same here. But what is the date/time/size of the Trend .exe and .dll files?

The version with the bug I described was also called 2.6 and when the fix was issued, the version didn’t change.

Subject: RE: Attachments → NETSKY.P

The version i have is 2.6_1158I see that the patch is version 2.6_1278.

Download in progress… will update ASAP. :smiley:

TNX a lot.

Subject: RE: Attachments → NETSKY.P

Hi!

Obviously outdated because I didn’t apply any fixes yet.

Will try applying the fix and i’ll get back to you.

Thanks fo now.