Trend Micro Questions

[Spicer, Kevin]

Gerry Doris wrote:
> I'e been messing around with Trend's virus scanner.  It seems to be
> very fast.  However, since I installed it I've got a couple of
> questions... 
> 
> 1. chkrootkit now warns me that I may have a possible slapper
> infection. I've checked the entire box with F-Prot and Trend's
> scanner and nothing is reported except for MailScanner's quarantine
> directory...but this still has me nervous.  Has anyone else seen this?
> 
> 2. Before I try out my very meager programming skills has anyone
> written an autoupdate script for Trend?

chkrootkit checks for the following files...
/tmp/.bugtraq
/tmp/.bugtraq.c
/tmp/.unlock
/tmp/httpd
/tmp/update
/tmp/.cinik
/tmp/.b

And the following open ports
2002
4156
1978
1812
2015

If any of those are found it reports a possible infection



BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.