Antivirus Recomendations?

Wow F-Secure, I haven't heard that name for a long time.
They've been around since the beginning.

Looks like F-Secure is about 30% Cost than Trend
But if you are happy with it, That's what counts!

--
Russ Grover
Small Business IT Support
Portland\Beaverton OR USA
Email: Sales at SmallBusinessITSupport.com
Website: www.SmallBusinessITSupport.com


"Kas." <no DeleteThis @spam.dk> wrote in message
news:OcfAGMrhFHA.1248@TK2MSFTNGP12.phx.gbl...
> Hi,
>
> I use the products from F-Secure with great pleasure on my SBS2003 box:
> www.f-secure.com
>
> Kasper
>
 >> Stay informed about: Antivirus Recomendations? 

A while back I switched two clients to TrendMicro SBS package. That was
before I found out that there is absolutely no indication that a sheduled
scan has run (unless it reports a virus). I think it's essential to have some
visibility when the scan starts, when it ends to verify that it is indeed
running on all pc's. It's just to easy for a pc to have a problem with
running the scheduled job and you never find out because there is no
TrendMicro log of the normal runs and there doesn't appear to be anything in
the system event logs. I won't be recommending this product because you just
don't know if the scheduled job ran during the night.


"Russ Grover" wrote:

> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been Screwed
> too many times..
>
> Try this
> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>
> Cheaper also.
>
> --
> Russ Grover
> Small Business IT Support
> Portland\Beaverton OR USA
> Email: Sales at SmallBusinessITSupport.com
> Website: www.SmallBusinessITSupport.com
>
>
> "AZ Steve" <AZSteve.RemoveThis@discussions.microsoft.com> wrote in message
> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
> > repository, Groupwise Exchange product and enterprise desktop on our
> > SBS2000
> > system, we ordered and new Server, SBS2003 and McAfees new Active Viruse
> > Defense for SBS. As soon as the server was loaded and running I installed
> > SP1, then called McAfee for assistance installing the protection pilot
> > V1.0.1
> > as the SQL MSDB would not install. The tech talked me through an
> > alternative
> > solution to get it working. The desktops all pushed out fine, but I
> > started
> > logging DCOM errors in the applicaion log. Instructions on MS site didnt
> > clear them up so I called McAfee.
> >
> > I was told I have two choices: uninstall proteciton pilot (the system that
> > monitors, pushes out installations/updates and reports on all activity or
> > uninstall SBS2003 SP1. They say they would be compliant with SP1 until
> > sometime after the first of the year....
> >
> > Anyone have experience with a similar product for the server, exchange and
> > desktops that automates the management tha works with SP1?
>
>
>
 >> Stay informed about: Antivirus Recomendations? 

On May 30, 11:24 am, Dabbler <Dabb... DeleteThis @discussions.microsoft.com>
wrote:
> A while back I switched two clients to TrendMicro SBS package. That was
> before I found out that there is absolutely no indication that a sheduled
> scan has run (unless it reports a virus). I think it's essential to have some
> visibility when the scan starts, when it ends to verify that it is indeed
> running on all pc's. It's just to easy for a pc to have a problem with
> running the scheduled job and you never find out because there is no
> TrendMicro log of the normal runs and there doesn't appear to be anything in
> the system event logs. I won't be recommending this product because you just
> don't know if the scheduled job ran during the night.
>
>
>
> "Russ Grover" wrote:
> > Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been Screwed
> > too many times..
>
> > Try this
> >http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/o...
>
> > Cheaper also.
>
> > --
> > Russ Grover
> > Small Business IT Support
> > Portland\Beaverton OR USA
> > Email: Sales at SmallBusinessITSupport.com
> > Website:www.SmallBusinessITSupport.com
>
> > "AZ Steve" <AZSt... DeleteThis @discussions.microsoft.com> wrote in message
> >news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
> > > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
> > > repository, Groupwise Exchange product and enterprise desktop on our
> > > SBS2000
> > > system, we ordered and new Server, SBS2003 and McAfees new Active Viruse
> > > Defense for SBS. As soon as the server was loaded and running I installed
> > > SP1, then called McAfee for assistance installing the protection pilot
> > > V1.0.1
> > > as the SQL MSDB would not install. The tech talked me through an
> > > alternative
> > > solution to get it working. The desktops all pushed out fine, but I
> > > started
> > > logging DCOM errors in the applicaion log. Instructions on MS site didnt
> > > clear them up so I called McAfee.
>
> > > I was told I have two choices: uninstall proteciton pilot (the system that
> > > monitors, pushes out installations/updates and reports on all activity or
> > > uninstall SBS2003 SP1. They say they would be compliant with SP1 until
> > > sometime after the first of the year....
>
> > > Anyone have experience with a similar product for the server, exchange and
> > > desktops that automates the management tha works with SP1?- Hide quoted text -
>
> - Show quoted text -

I use the AVG Small Business package on my SBS2K3 Premium R2 network
with 17 desktops and 3 laptops. It was very reasonably priced, did an
excellent job of clearing an infection (we had a bad one) and has sort
of high overhead but works well overall.
 >> Stay informed about: Antivirus Recomendations? 

could you elaborate on high overhead? CPU cycles, RAM etc? I know Symantec's
scanner is wicked fast, how is the speed of the AVG SBS?

Thanks.


"Dave the Clueless" wrote:

> On May 30, 11:24 am, Dabbler <Dabb... DeleteThis @discussions.microsoft.com>
> wrote:
> > A while back I switched two clients to TrendMicro SBS package. That was
> > before I found out that there is absolutely no indication that a sheduled
> > scan has run (unless it reports a virus). I think it's essential to have some
> > visibility when the scan starts, when it ends to verify that it is indeed
> > running on all pc's. It's just to easy for a pc to have a problem with
> > running the scheduled job and you never find out because there is no
> > TrendMicro log of the normal runs and there doesn't appear to be anything in
> > the system event logs. I won't be recommending this product because you just
> > don't know if the scheduled job ran during the night.
> >
> >
> >
> > "Russ Grover" wrote:
> > > Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been Screwed
> > > too many times..
> >
> > > Try this
> > >http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/o...
> >
> > > Cheaper also.
> >
> > > --
> > > Russ Grover
> > > Small Business IT Support
> > > Portland\Beaverton OR USA
> > > Email: Sales at SmallBusinessITSupport.com
> > > Website:www.SmallBusinessITSupport.com
> >
> > > "AZ Steve" <AZSt... DeleteThis @discussions.microsoft.com> wrote in message
> > >news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
> > > > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
> > > > repository, Groupwise Exchange product and enterprise desktop on our
> > > > SBS2000
> > > > system, we ordered and new Server, SBS2003 and McAfees new Active Viruse
> > > > Defense for SBS. As soon as the server was loaded and running I installed
> > > > SP1, then called McAfee for assistance installing the protection pilot
> > > > V1.0.1
> > > > as the SQL MSDB would not install. The tech talked me through an
> > > > alternative
> > > > solution to get it working. The desktops all pushed out fine, but I
> > > > started
> > > > logging DCOM errors in the applicaion log. Instructions on MS site didnt
> > > > clear them up so I called McAfee.
> >
> > > > I was told I have two choices: uninstall proteciton pilot (the system that
> > > > monitors, pushes out installations/updates and reports on all activity or
> > > > uninstall SBS2003 SP1. They say they would be compliant with SP1 until
> > > > sometime after the first of the year....
> >
> > > > Anyone have experience with a similar product for the server, exchange and
> > > > desktops that automates the management tha works with SP1?- Hide quoted text -
> >
> > - Show quoted text -
>
> I use the AVG Small Business package on my SBS2K3 Premium R2 network
> with 17 desktops and 3 laptops. It was very reasonably priced, did an
> excellent job of clearing an infection (we had a bad one) and has sort
> of high overhead but works well overall.
>
>
>
 >> Stay informed about: Antivirus Recomendations? 

In article <F8A5655C-A363-4737-901C-4146DC4B80D4 DeleteThis @microsoft.com>,
Dabbler DeleteThis @discussions.microsoft.com says...

> could you elaborate on high overhead? CPU cycles, RAM etc? I know Symantec's
> scanner is wicked fast, how is the speed of the AVG SBS?

I also use the most recent version of AVG Anti-Malware SBS (7.5.467) and
the issue I am seeing is with RAM usage when a centrally managed
installation is performed with the anti-spyware component active. Right
now, that configuration is averaging about 110MB - 120MB per station. I
opened a case with AVG Tech Support and they tell me there is a bug in
this version which is causing the excessive RAM usage. Normal should be
about 1/2 of what I'm actually seeing. It will be fixed by a program
update, but no time frame yet.

I should emphasize here that I am NOT seeing any other issues. I've
used AVG for years, have been very happy with it, and would say it as
frugal with resource usage, until this RAM issue. Also, the bug occurs
only on XP and Win Svr 2003 (including SBS), not on Vista.

If the RAM is a problem, the temporary workaround is to *not* configure
centralized management and reporting when the product is set up. AVG
still works fine, but the configuration takes more time and effort and
you lose some visibility. This is a bigger deal with larger networks.
For the time being, I'm living with the extra RAM requirement in hopes
the bug will be fixed soon.

-- Owen Williams (SBS MVP)
 >> Stay informed about: Antivirus Recomendations? 

Actually there is a Scheduler??
It's hard to find but it is there..

--

Russell Grover
SBITS.Biz
Microsoft Certified Small Business Specialist.
MCP, MCPS, MCNPS, (MCP-SBS)
support @ SBITS.Biz
Remote SBS2003 Support
http://www.SBITS.Biz


"Dabbler" <Dabbler.RemoveThis@discussions.microsoft.com> wrote in message
news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>
> A while back I switched two clients to TrendMicro SBS package. That was
> before I found out that there is absolutely no indication that a sheduled
> scan has run (unless it reports a virus). I think it's essential to have
> some
> visibility when the scan starts, when it ends to verify that it is indeed
> running on all pc's. It's just to easy for a pc to have a problem with
> running the scheduled job and you never find out because there is no
> TrendMicro log of the normal runs and there doesn't appear to be anything
> in
> the system event logs. I won't be recommending this product because you
> just
> don't know if the scheduled job ran during the night.
>
>
> "Russ Grover" wrote:
>
>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>> Screwed
>> too many times..
>>
>> Try this
>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>
>> Cheaper also.
>>
>> --
>> Russ Grover
>> Small Business IT Support
>> Portland\Beaverton OR USA
>> Email: Sales at SmallBusinessITSupport.com
>> Website: www.SmallBusinessITSupport.com
>>
>>
>> "AZ Steve" <AZSteve.RemoveThis@discussions.microsoft.com> wrote in message
>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>> > repository, Groupwise Exchange product and enterprise desktop on our
>> > SBS2000
>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>> > Viruse
>> > Defense for SBS. As soon as the server was loaded and running I
>> > installed
>> > SP1, then called McAfee for assistance installing the protection pilot
>> > V1.0.1
>> > as the SQL MSDB would not install. The tech talked me through an
>> > alternative
>> > solution to get it working. The desktops all pushed out fine, but I
>> > started
>> > logging DCOM errors in the applicaion log. Instructions on MS site
>> > didnt
>> > clear them up so I called McAfee.
>> >
>> > I was told I have two choices: uninstall proteciton pilot (the system
>> > that
>> > monitors, pushes out installations/updates and reports on all activity
>> > or
>> > uninstall SBS2003 SP1. They say they would be compliant with SP1 until
>> > sometime after the first of the year....
>> >
>> > Anyone have experience with a similar product for the server, exchange
>> > and
>> > desktops that automates the management tha works with SP1?
>>
>>
>>
 >> Stay informed about: Antivirus Recomendations? 

I believe you can do a log query, and you can also generate reports with the
same information.

However, I don't believe in scheduled scans. Real-Time scanning means files
are scanned on all read/writes. If real-time scanning can't do the job, I
don't want the product.

Manual scans are fine, there are sometimes good reasons to kick off a scan
manual scan - but that's different from a scheduled scan.

But I could be missing something, so feel free to change my mind.

--
Les Connor [SBS MVP]


"Dabbler" <Dabbler.TakeThisOut@discussions.microsoft.com> wrote in message
news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>
> A while back I switched two clients to TrendMicro SBS package. That was
> before I found out that there is absolutely no indication that a sheduled
> scan has run (unless it reports a virus). I think it's essential to have
> some
> visibility when the scan starts, when it ends to verify that it is indeed
> running on all pc's. It's just to easy for a pc to have a problem with
> running the scheduled job and you never find out because there is no
> TrendMicro log of the normal runs and there doesn't appear to be anything
> in
> the system event logs. I won't be recommending this product because you
> just
> don't know if the scheduled job ran during the night.
>
>
> "Russ Grover" wrote:
>
>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>> Screwed
>> too many times..
>>
>> Try this
>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>
>> Cheaper also.
>>
>> --
>> Russ Grover
>> Small Business IT Support
>> Portland\Beaverton OR USA
>> Email: Sales at SmallBusinessITSupport.com
>> Website: www.SmallBusinessITSupport.com
>>
>>
>> "AZ Steve" <AZSteve.TakeThisOut@discussions.microsoft.com> wrote in message
>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>> > repository, Groupwise Exchange product and enterprise desktop on our
>> > SBS2000
>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>> > Viruse
>> > Defense for SBS. As soon as the server was loaded and running I
>> > installed
>> > SP1, then called McAfee for assistance installing the protection pilot
>> > V1.0.1
>> > as the SQL MSDB would not install. The tech talked me through an
>> > alternative
>> > solution to get it working. The desktops all pushed out fine, but I
>> > started
>> > logging DCOM errors in the applicaion log. Instructions on MS site
>> > didnt
>> > clear them up so I called McAfee.
>> >
>> > I was told I have two choices: uninstall proteciton pilot (the system
>> > that
>> > monitors, pushes out installations/updates and reports on all activity
>> > or
>> > uninstall SBS2003 SP1. They say they would be compliant with SP1 until
>> > sometime after the first of the year....
>> >
>> > Anyone have experience with a similar product for the server, exchange
>> > and
>> > desktops that automates the management tha works with SP1?
>>
>>
>>
 >> Stay informed about: Antivirus Recomendations? 

The only reason I've found for scheduled scans is the chance that you have
some malware which was not detected by the current patterns when you saved
the file, but a newer pattern now detects it. Not very likely I think, but
possible. I agree with the original poster that it would be nice if there
were an easy way to see the scheduled scan results in Trend Micro. I've
tried looking at log queries/reports, but it's not easy to find.
Paul Shapiro

"Les Connor [SBS MVP]" <les.connor.TakeThisOut@DEL.cfive.ca> wrote in message
news:3CC4F1E3-2884-4085-993A-0CD050B4E2CB@microsoft.com...
>I believe you can do a log query, and you can also generate reports with
>the same information.
>
> However, I don't believe in scheduled scans. Real-Time scanning means
> files are scanned on all read/writes. If real-time scanning can't do the
> job, I don't want the product.
>
> Manual scans are fine, there are sometimes good reasons to kick off a scan
> manual scan - but that's different from a scheduled scan.
>
> But I could be missing something, so feel free to change my mind.
>
> --
> Les Connor [SBS MVP]
>
>
> "Dabbler" <Dabbler.TakeThisOut@discussions.microsoft.com> wrote in message
> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>
>> A while back I switched two clients to TrendMicro SBS package. That was
>> before I found out that there is absolutely no indication that a sheduled
>> scan has run (unless it reports a virus). I think it's essential to have
>> some
>> visibility when the scan starts, when it ends to verify that it is indeed
>> running on all pc's. It's just to easy for a pc to have a problem with
>> running the scheduled job and you never find out because there is no
>> TrendMicro log of the normal runs and there doesn't appear to be anything
>> in
>> the system event logs. I won't be recommending this product because you
>> just don't know if the scheduled job ran during the night.
>>
>>
>> "Russ Grover" wrote:
>>
>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>> Screwed
>>> too many times..
>>>
>>> Try this
>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>
>>> Cheaper also.
>>>
>>> --
>>> Russ Grover
>>> Small Business IT Support
>>> Portland\Beaverton OR USA
>>> Email: Sales at SmallBusinessITSupport.com
>>> Website: www.SmallBusinessITSupport.com
>>>
>>>
>>> "AZ Steve" <AZSteve.TakeThisOut@discussions.microsoft.com> wrote in message
>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>>> > repository, Groupwise Exchange product and enterprise desktop on our
>>> > SBS2000
>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>> > Viruse
>>> > Defense for SBS. As soon as the server was loaded and running I
>>> > installed
>>> > SP1, then called McAfee for assistance installing the protection pilot
>>> > V1.0.1
>>> > as the SQL MSDB would not install. The tech talked me through an
>>> > alternative
>>> > solution to get it working. The desktops all pushed out fine, but I
>>> > started
>>> > logging DCOM errors in the applicaion log. Instructions on MS site
>>> > didnt clear them up so I called McAfee.
>>> >
>>> > I was told I have two choices: uninstall proteciton pilot (the system
>>> > that
>>> > monitors, pushes out installations/updates and reports on all activity
>>> > or
>>> > uninstall SBS2003 SP1. They say they would be compliant with SP1
>>> > until
>>> > sometime after the first of the year....
>>> >
>>> > Anyone have experience with a similar product for the server, exchange
>>> > and desktops that automates the management tha works with SP1?
 >> Stay informed about: Antivirus Recomendations? 

and I have no problem that it silently succeeds, failures generate an
alert/action item.

I'm not sure whether you get emailed if a scheduled scan fails, think so.

"Russ Grover (SBITS.Biz)" <support DeleteThis @REMOVETHIS.SBITS.Biz> wrote in message
news:%23VullgxoHHA.4132@TK2MSFTNGP02.phx.gbl...
> Actually there is a Scheduler??
> It's hard to find but it is there..
>
> --
>
> Russell Grover
> SBITS.Biz
> Microsoft Certified Small Business Specialist.
> MCP, MCPS, MCNPS, (MCP-SBS)
> support @ SBITS.Biz
> Remote SBS2003 Support
> http://www.SBITS.Biz
>
>
> "Dabbler" <Dabbler DeleteThis @discussions.microsoft.com> wrote in message
> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>
>> A while back I switched two clients to TrendMicro SBS package. That was
>> before I found out that there is absolutely no indication that a sheduled
>> scan has run (unless it reports a virus). I think it's essential to have
>> some
>> visibility when the scan starts, when it ends to verify that it is indeed
>> running on all pc's. It's just to easy for a pc to have a problem with
>> running the scheduled job and you never find out because there is no
>> TrendMicro log of the normal runs and there doesn't appear to be anything
>> in
>> the system event logs. I won't be recommending this product because you
>> just
>> don't know if the scheduled job ran during the night.
>>
>>
>> "Russ Grover" wrote:
>>
>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>> Screwed
>>> too many times..
>>>
>>> Try this
>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>
>>> Cheaper also.
>>>
>>> --
>>> Russ Grover
>>> Small Business IT Support
>>> Portland\Beaverton OR USA
>>> Email: Sales at SmallBusinessITSupport.com
>>> Website: www.SmallBusinessITSupport.com
>>>
>>>
>>> "AZ Steve" <AZSteve DeleteThis @discussions.microsoft.com> wrote in message
>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>>> > repository, Groupwise Exchange product and enterprise desktop on our
>>> > SBS2000
>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>> > Viruse
>>> > Defense for SBS. As soon as the server was loaded and running I
>>> > installed
>>> > SP1, then called McAfee for assistance installing the protection pilot
>>> > V1.0.1
>>> > as the SQL MSDB would not install. The tech talked me through an
>>> > alternative
>>> > solution to get it working. The desktops all pushed out fine, but I
>>> > started
>>> > logging DCOM errors in the applicaion log. Instructions on MS site
>>> > didnt
>>> > clear them up so I called McAfee.
>>> >
>>> > I was told I have two choices: uninstall proteciton pilot (the system
>>> > that
>>> > monitors, pushes out installations/updates and reports on all activity
>>> > or
>>> > uninstall SBS2003 SP1. They say they would be compliant with SP1
>>> > until
>>> > sometime after the first of the year....
>>> >
>>> > Anyone have experience with a similar product for the server, exchange
>>> > and
>>> > desktops that automates the management tha works with SP1?
>>>
>>>
>>>
>
>
 >> Stay informed about: Antivirus Recomendations? 

Actually that's one thing I don't like, It emails you on EVERYTHING
failing...
And something's I don't care about...

--

Russell Grover
SBITS.Biz
Microsoft Certified Small Business Specialist.
MCP, MCPS, MCNPS, (MCP-SBS)
support @ SBITS.Biz
Remote SBS2003 Support
http://www.SBITS.Biz


"SuperGumby [SBS MVP]" <not DeleteThis @your.nellie> wrote in message
news:eY3TamxoHHA.3264@TK2MSFTNGP04.phx.gbl...
> and I have no problem that it silently succeeds, failures generate an
> alert/action item.
>
> I'm not sure whether you get emailed if a scheduled scan fails, think so.
>
> "Russ Grover (SBITS.Biz)" <support DeleteThis @REMOVETHIS.SBITS.Biz> wrote in message
> news:%23VullgxoHHA.4132@TK2MSFTNGP02.phx.gbl...
>> Actually there is a Scheduler??
>> It's hard to find but it is there..
>>
>> --
>>
>> Russell Grover
>> SBITS.Biz
>> Microsoft Certified Small Business Specialist.
>> MCP, MCPS, MCNPS, (MCP-SBS)
>> support @ SBITS.Biz
>> Remote SBS2003 Support
>> http://www.SBITS.Biz
>>
>>
>> "Dabbler" <Dabbler DeleteThis @discussions.microsoft.com> wrote in message
>> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>>
>>> A while back I switched two clients to TrendMicro SBS package. That was
>>> before I found out that there is absolutely no indication that a
>>> sheduled
>>> scan has run (unless it reports a virus). I think it's essential to have
>>> some
>>> visibility when the scan starts, when it ends to verify that it is
>>> indeed
>>> running on all pc's. It's just to easy for a pc to have a problem with
>>> running the scheduled job and you never find out because there is no
>>> TrendMicro log of the normal runs and there doesn't appear to be
>>> anything in
>>> the system event logs. I won't be recommending this product because you
>>> just
>>> don't know if the scheduled job ran during the night.
>>>
>>>
>>> "Russ Grover" wrote:
>>>
>>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>>> Screwed
>>>> too many times..
>>>>
>>>> Try this
>>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>>
>>>> Cheaper also.
>>>>
>>>> --
>>>> Russ Grover
>>>> Small Business IT Support
>>>> Portland\Beaverton OR USA
>>>> Email: Sales at SmallBusinessITSupport.com
>>>> Website: www.SmallBusinessITSupport.com
>>>>
>>>>
>>>> "AZ Steve" <AZSteve DeleteThis @discussions.microsoft.com> wrote in message
>>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>>>> > repository, Groupwise Exchange product and enterprise desktop on our
>>>> > SBS2000
>>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>>> > Viruse
>>>> > Defense for SBS. As soon as the server was loaded and running I
>>>> > installed
>>>> > SP1, then called McAfee for assistance installing the protection
>>>> > pilot
>>>> > V1.0.1
>>>> > as the SQL MSDB would not install. The tech talked me through an
>>>> > alternative
>>>> > solution to get it working. The desktops all pushed out fine, but I
>>>> > started
>>>> > logging DCOM errors in the applicaion log. Instructions on MS site
>>>> > didnt
>>>> > clear them up so I called McAfee.
>>>> >
>>>> > I was told I have two choices: uninstall proteciton pilot (the system
>>>> > that
>>>> > monitors, pushes out installations/updates and reports on all
>>>> > activity or
>>>> > uninstall SBS2003 SP1. They say they would be compliant with SP1
>>>> > until
>>>> > sometime after the first of the year....
>>>> >
>>>> > Anyone have experience with a similar product for the server,
>>>> > exchange and
>>>> > desktops that automates the management tha works with SP1?
>>>>
>>>>
>>>>
>>
>>
>
>
 >> Stay informed about: Antivirus Recomendations? 

Sure, but your scenario is covered by a manual scan - (or, a scheduled scan
but run only once).

As Supergumby mentioned - if there *is* malware detected, it's reported.

Reports > Log Query > Desktop/Server > Incident: you can have the query
report on Manual Scan, R/T scan, Scheduled Scan, and Cleanup.

I don't know of a way to get an automated report on the success or failure,
but once you find the appropriate log query settings the report is sweet,
albiet manual.

--
Les Connor [SBS MVP]


"Paul Shapiro" <paul DeleteThis @hideme.broadwayData.com> wrote in message
news:e02z4x4oHHA.4192@TK2MSFTNGP06.phx.gbl...
> The only reason I've found for scheduled scans is the chance that you have
> some malware which was not detected by the current patterns when you saved
> the file, but a newer pattern now detects it. Not very likely I think, but
> possible. I agree with the original poster that it would be nice if there
> were an easy way to see the scheduled scan results in Trend Micro. I've
> tried looking at log queries/reports, but it's not easy to find.
> Paul Shapiro
>
> "Les Connor [SBS MVP]" <les.connor DeleteThis @DEL.cfive.ca> wrote in message
> news:3CC4F1E3-2884-4085-993A-0CD050B4E2CB@microsoft.com...
>>I believe you can do a log query, and you can also generate reports with
>>the same information.
>>
>> However, I don't believe in scheduled scans. Real-Time scanning means
>> files are scanned on all read/writes. If real-time scanning can't do the
>> job, I don't want the product.
>>
>> Manual scans are fine, there are sometimes good reasons to kick off a
>> scan manual scan - but that's different from a scheduled scan.
>>
>> But I could be missing something, so feel free to change my mind.
>>
>> --
>> Les Connor [SBS MVP]
>>
>>
>> "Dabbler" <Dabbler DeleteThis @discussions.microsoft.com> wrote in message
>> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>>
>>> A while back I switched two clients to TrendMicro SBS package. That was
>>> before I found out that there is absolutely no indication that a
>>> sheduled
>>> scan has run (unless it reports a virus). I think it's essential to have
>>> some
>>> visibility when the scan starts, when it ends to verify that it is
>>> indeed
>>> running on all pc's. It's just to easy for a pc to have a problem with
>>> running the scheduled job and you never find out because there is no
>>> TrendMicro log of the normal runs and there doesn't appear to be
>>> anything in
>>> the system event logs. I won't be recommending this product because you
>>> just don't know if the scheduled job ran during the night.
>>>
>>>
>>> "Russ Grover" wrote:
>>>
>>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>>> Screwed
>>>> too many times..
>>>>
>>>> Try this
>>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>>
>>>> Cheaper also.
>>>>
>>>> --
>>>> Russ Grover
>>>> Small Business IT Support
>>>> Portland\Beaverton OR USA
>>>> Email: Sales at SmallBusinessITSupport.com
>>>> Website: www.SmallBusinessITSupport.com
>>>>
>>>>
>>>> "AZ Steve" <AZSteve DeleteThis @discussions.microsoft.com> wrote in message
>>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>>>> > repository, Groupwise Exchange product and enterprise desktop on our
>>>> > SBS2000
>>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>>> > Viruse
>>>> > Defense for SBS. As soon as the server was loaded and running I
>>>> > installed
>>>> > SP1, then called McAfee for assistance installing the protection
>>>> > pilot
>>>> > V1.0.1
>>>> > as the SQL MSDB would not install. The tech talked me through an
>>>> > alternative
>>>> > solution to get it working. The desktops all pushed out fine, but I
>>>> > started
>>>> > logging DCOM errors in the applicaion log. Instructions on MS site
>>>> > didnt clear them up so I called McAfee.
>>>> >
>>>> > I was told I have two choices: uninstall proteciton pilot (the system
>>>> > that
>>>> > monitors, pushes out installations/updates and reports on all
>>>> > activity or
>>>> > uninstall SBS2003 SP1. They say they would be compliant with SP1
>>>> > until
>>>> > sometime after the first of the year....
>>>> >
>>>> > Anyone have experience with a similar product for the server,
>>>> > exchange and desktops that automates the management tha works with
>>>> > SP1?
>
>
 >> Stay informed about: Antivirus Recomendations? 

I see the report. You have to run it twice- once for virus and once for
antispyware. There isn't any confirmation that the scheduled scan actually
took place. All you see is a log of any problems found. The absence of
problems is not the same as knowing the scan happened. I like TM but I find
this reporting something that could be improved.
Paul Shapiro

"Les Connor [SBS MVP]" <les.connor DeleteThis @DEL.cfive.ca> wrote in message
news:F3521415-67E5-4B84-BE67-9E09E8AE4A06@microsoft.com...
> Sure, but your scenario is covered by a manual scan - (or, a scheduled
> scan but run only once).
>
> As Supergumby mentioned - if there *is* malware detected, it's reported.
>
> Reports > Log Query > Desktop/Server > Incident: you can have the query
> report on Manual Scan, R/T scan, Scheduled Scan, and Cleanup.
>
> I don't know of a way to get an automated report on the success or
> failure, but once you find the appropriate log query settings the report
> is sweet, albiet manual.
>
> --
> Les Connor [SBS MVP]
>
>
> "Paul Shapiro" <paul DeleteThis @hideme.broadwayData.com> wrote in message
> news:e02z4x4oHHA.4192@TK2MSFTNGP06.phx.gbl...
>> The only reason I've found for scheduled scans is the chance that you
>> have some malware which was not detected by the current patterns when you
>> saved the file, but a newer pattern now detects it. Not very likely I
>> think, but possible. I agree with the original poster that it would be
>> nice if there were an easy way to see the scheduled scan results in Trend
>> Micro. I've tried looking at log queries/reports, but it's not easy to
>> find.
>> Paul Shapiro
>>
>> "Les Connor [SBS MVP]" <les.connor DeleteThis @DEL.cfive.ca> wrote in message
>> news:3CC4F1E3-2884-4085-993A-0CD050B4E2CB@microsoft.com...
>>>I believe you can do a log query, and you can also generate reports with
>>>the same information.
>>>
>>> However, I don't believe in scheduled scans. Real-Time scanning means
>>> files are scanned on all read/writes. If real-time scanning can't do the
>>> job, I don't want the product.
>>>
>>> Manual scans are fine, there are sometimes good reasons to kick off a
>>> scan manual scan - but that's different from a scheduled scan.
>>>
>>> But I could be missing something, so feel free to change my mind.
>>>
>>> --
>>> Les Connor [SBS MVP]
>>>
>>>
>>> "Dabbler" <Dabbler DeleteThis @discussions.microsoft.com> wrote in message
>>> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>>>
>>>> A while back I switched two clients to TrendMicro SBS package. That was
>>>> before I found out that there is absolutely no indication that a
>>>> sheduled
>>>> scan has run (unless it reports a virus). I think it's essential to
>>>> have some
>>>> visibility when the scan starts, when it ends to verify that it is
>>>> indeed
>>>> running on all pc's. It's just to easy for a pc to have a problem with
>>>> running the scheduled job and you never find out because there is no
>>>> TrendMicro log of the normal runs and there doesn't appear to be
>>>> anything in
>>>> the system event logs. I won't be recommending this product because you
>>>> just don't know if the scheduled job ran during the night.
>>>>
>>>>
>>>> "Russ Grover" wrote:
>>>>
>>>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>>>> Screwed
>>>>> too many times..
>>>>>
>>>>> Try this
>>>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>>>
>>>>> Cheaper also.
>>>>>
>>>>> --
>>>>> Russ Grover
>>>>> Small Business IT Support
>>>>> Portland\Beaverton OR USA
>>>>> Email: Sales at SmallBusinessITSupport.com
>>>>> Website: www.SmallBusinessITSupport.com
>>>>>
>>>>>
>>>>> "AZ Steve" <AZSteve DeleteThis @discussions.microsoft.com> wrote in message
>>>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>>>> > Having had good luck with McAfee's Enterprise antivurus using EPO3.5
>>>>> > repository, Groupwise Exchange product and enterprise desktop on our
>>>>> > SBS2000
>>>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>>>> > Viruse
>>>>> > Defense for SBS. As soon as the server was loaded and running I
>>>>> > installed
>>>>> > SP1, then called McAfee for assistance installing the protection
>>>>> > pilot
>>>>> > V1.0.1
>>>>> > as the SQL MSDB would not install. The tech talked me through an
>>>>> > alternative
>>>>> > solution to get it working. The desktops all pushed out fine, but I
>>>>> > started
>>>>> > logging DCOM errors in the applicaion log. Instructions on MS site
>>>>> > didnt clear them up so I called McAfee.
>>>>> >
>>>>> > I was told I have two choices: uninstall proteciton pilot (the
>>>>> > system that
>>>>> > monitors, pushes out installations/updates and reports on all
>>>>> > activity or
>>>>> > uninstall SBS2003 SP1. They say they would be compliant with SP1
>>>>> > until
>>>>> > sometime after the first of the year....
>>>>> >
>>>>> > Anyone have experience with a similar product for the server,
>>>>> > exchange and desktops that automates the management tha works with
>>>>> > SP1?
 >> Stay informed about: Antivirus Recomendations? 

Fair comment, Paul.

I forwarded the thread to Trend as a feature request.

--
Les Connor [SBS MVP]


"Paul Shapiro" <paul.RemoveThis@hideme.broadwayData.com> wrote in message
news:OlwA7D$oHHA.2156@TK2MSFTNGP03.phx.gbl...
>I see the report. You have to run it twice- once for virus and once for
>antispyware. There isn't any confirmation that the scheduled scan actually
>took place. All you see is a log of any problems found. The absence of
>problems is not the same as knowing the scan happened. I like TM but I find
>this reporting something that could be improved.
> Paul Shapiro
>
> "Les Connor [SBS MVP]" <les.connor.RemoveThis@DEL.cfive.ca> wrote in message
> news:F3521415-67E5-4B84-BE67-9E09E8AE4A06@microsoft.com...
>> Sure, but your scenario is covered by a manual scan - (or, a scheduled
>> scan but run only once).
>>
>> As Supergumby mentioned - if there *is* malware detected, it's reported.
>>
>> Reports > Log Query > Desktop/Server > Incident: you can have the query
>> report on Manual Scan, R/T scan, Scheduled Scan, and Cleanup.
>>
>> I don't know of a way to get an automated report on the success or
>> failure, but once you find the appropriate log query settings the report
>> is sweet, albiet manual.
>>
>> --
>> Les Connor [SBS MVP]
>>
>>
>> "Paul Shapiro" <paul.RemoveThis@hideme.broadwayData.com> wrote in message
>> news:e02z4x4oHHA.4192@TK2MSFTNGP06.phx.gbl...
>>> The only reason I've found for scheduled scans is the chance that you
>>> have some malware which was not detected by the current patterns when
>>> you saved the file, but a newer pattern now detects it. Not very likely
>>> I think, but possible. I agree with the original poster that it would be
>>> nice if there were an easy way to see the scheduled scan results in
>>> Trend Micro. I've tried looking at log queries/reports, but it's not
>>> easy to find.
>>> Paul Shapiro
>>>
>>> "Les Connor [SBS MVP]" <les.connor.RemoveThis@DEL.cfive.ca> wrote in message
>>> news:3CC4F1E3-2884-4085-993A-0CD050B4E2CB@microsoft.com...
>>>>I believe you can do a log query, and you can also generate reports with
>>>>the same information.
>>>>
>>>> However, I don't believe in scheduled scans. Real-Time scanning means
>>>> files are scanned on all read/writes. If real-time scanning can't do
>>>> the job, I don't want the product.
>>>>
>>>> Manual scans are fine, there are sometimes good reasons to kick off a
>>>> scan manual scan - but that's different from a scheduled scan.
>>>>
>>>> But I could be missing something, so feel free to change my mind.
>>>>
>>>> --
>>>> Les Connor [SBS MVP]
>>>>
>>>>
>>>> "Dabbler" <Dabbler.RemoveThis@discussions.microsoft.com> wrote in message
>>>> news:998C8368-9123-493D-8556-376DE0A51A59@microsoft.com...
>>>>>
>>>>> A while back I switched two clients to TrendMicro SBS package. That
>>>>> was
>>>>> before I found out that there is absolutely no indication that a
>>>>> sheduled
>>>>> scan has run (unless it reports a virus). I think it's essential to
>>>>> have some
>>>>> visibility when the scan starts, when it ends to verify that it is
>>>>> indeed
>>>>> running on all pc's. It's just to easy for a pc to have a problem with
>>>>> running the scheduled job and you never find out because there is no
>>>>> TrendMicro log of the normal runs and there doesn't appear to be
>>>>> anything in
>>>>> the system event logs. I won't be recommending this product because
>>>>> you just don't know if the scheduled job ran during the night.
>>>>>
>>>>>
>>>>> "Russ Grover" wrote:
>>>>>
>>>>>> Aw, another happy McAfee Customer. (Notice the sarcasm?) Sorry been
>>>>>> Screwed
>>>>>> too many times..
>>>>>>
>>>>>> Try this
>>>>>> http://www.trendmicro.com/en/products/suites/csm-smb-suite/evaluate/overview.htm
>>>>>>
>>>>>> Cheaper also.
>>>>>>
>>>>>> --
>>>>>> Russ Grover
>>>>>> Small Business IT Support
>>>>>> Portland\Beaverton OR USA
>>>>>> Email: Sales at SmallBusinessITSupport.com
>>>>>> Website: www.SmallBusinessITSupport.com
>>>>>>
>>>>>>
>>>>>> "AZ Steve" <AZSteve.RemoveThis@discussions.microsoft.com> wrote in message
>>>>>> news:5742829C-B560-4920-BCCB-D7FEA86B6521@microsoft.com...
>>>>>> > Having had good luck with McAfee's Enterprise antivurus using
>>>>>> > EPO3.5
>>>>>> > repository, Groupwise Exchange product and enterprise desktop on
>>>>>> > our
>>>>>> > SBS2000
>>>>>> > system, we ordered and new Server, SBS2003 and McAfees new Active
>>>>>> > Viruse
>>>>>> > Defense for SBS. As soon as the server was loaded and running I
>>>>>> > installed
>>>>>> > SP1, then called McAfee for assistance installing the protection
>>>>>> > pilot
>>>>>> > V1.0.1
>>>>>> > as the SQL MSDB would not install. The tech talked me through an
>>>>>> > alternative
>>>>>> > solution to get it working. The desktops all pushed out fine, but
>>>>>> > I
>>>>>> > started
>>>>>> > logging DCOM errors in the applicaion