Help - Search - Members
Full Version: Reports of trojan downloader
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
abduction
Hi all

We are running 20 Workstations with one Master server of Kaspersky adminkit, when I look into "Events" -> "Critical events" I can see a lot of errors,
how can it be that I dont get thees trojans in the "Protection status" or when I genereate a report of "Virus activity report"

For our Workstations I had made a policy
Click to view attachment


Quarantine: File Outlook\Private mapper\Øverste niveau i de private mapper\Uønsket e-mail\[From:PosteItaliane][Subject:[!! SPAM] Riattiva imediatamente il tuo conto][Time:2008/01/18 20:15:44]/HTMLBody: detected modification of Trojan program 'Trojan-Spy.HTML.Fraud.gen'.

Click to view attachment


Any ideas how to sovle this problem?


mastropizza
QUOTE(abduction @ 4.04.2008 08:40) *
Hi all

We are running 20 Workstations with one Master server of Kaspersky adminkit, when I look into "Events" -> "Critical events" I can see a lot of errors,
how can it be that I dont get thees trojans in the "Protection status" or when I genereate a report of "Virus activity report"

For our Workstations I had made a policy
Click to view attachment
Quarantine: File Outlook\Private mapper\Øverste niveau i de private mapper\Uønsket e-mail\[From:PosteItaliane][Subject:[!! SPAM] Riattiva imediatamente il tuo conto][Time:2008/01/18 20:15:44]/HTMLBody: detected modification of Trojan program 'Trojan-Spy.HTML.Fraud.gen'.

Click to view attachment
Any ideas how to sovle this problem?

hi,
did you/administrator receive alerts by mail? Could you pls post a screenshot of "Virus activity report"?
Which version of AK/Net Agent are you working with?
Bye
M.
abduction
QUOTE(mastropizza @ 4.04.2008 11:28) *
hi,
did you/administrator receive alerts by mail? Could you pls post a screenshot of "Virus activity report"?
Which version of AK/Net Agent are you working with?
Bye
M.


It is only sometimes that I receives mails when emails contains viruses, all the othere times I receives emails.
But I was wondering why all the mail viruses not are collected in the "Virus activity report"

Screenshot of Virus activity report
Click to view attachment

We are running lastes version of AK and Net (AK v6.0.1572 Net v.6.0.1572)

mastropizza
hi,
unfortunately the most important part of your screenshot is not present....on the bottom of it you should have the item "Details": if you have enabled ActiveX you should be able to expand the Details area and get much more info about virus activity.
M.
abduction
QUOTE(mastropizza @ 7.04.2008 09:19) *
hi,
unfortunately the most important part of your screenshot is not present....on the bottom of it you should have the item "Details": if you have enabled ActiveX you should be able to expand the Details area and get much more info about virus activity.
M.



Okay a new screenshot
Click to view attachment
mastropizza
it seems that here you have all the viruses details...isn't it what you're looking for?
M.
abduction
QUOTE(mastropizza @ 7.04.2008 09:35) *
it seems that here you have all the viruses details...isn't it what you're looking for?
M.



Exactly but I thinking it should view all the report of a virus, self if we get 50 of the same virus, maybe I am wrong?
mastropizza
well, this report should state every virus detection in the network despite to the fact that the same malware has been detected on one machine or all over the LAN....don't forget that you can configure report details: default settings can be tuned much more in depth.
...sincerely i'm not sure about your real need... blink.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.