Increased Trojan Activity

(imported topic written by SystemAdmin)

Has anyone with CPM installed (or possibly any AV) seen an increase of Trojan activity events this week (all classified as Trojan_Generic) - starting Monday? I checked with a Trend contact and he had not heard of anything out of the ordinary - but would investigate. However, we have had over 50 new events this week. Still trying to work out the details - but we believe these were systems that were compromised with our previous AV vendor and now Trend is picking up the activity based on updated definitions or changes in the status of the existing Trojan (maybe a sleeping giant - awakening).

Trend is doing a great job! Just curious if anyone else was seeing strange activity this week.

Cheers,

Mike

(imported comment written by SystemAdmin)

I can tell you that we are seeing increased activity of what Trend calls Trojan_Generic and variations of it - using the full Trend product, which is basically the same as CPM. I can also tell you that submitting suspected files to sites like Virus Total shows zero hits, including Trend. So we are pretty confident that these are false positives.

As we do three levels of scanning on internet content before it gets to the desktop, we are pretty confident we are seeing false hits from Trend.

(imported comment written by SystemAdmin)

Thanks a ton for your reply. I just heard from my Trend contact - and he has heard of another CPM customer seeing similar occurrences. Good to know that you are seeing this in the straight Trend product. For us it started happening after last Monday’s morning def update. Thanks!

Mike