RE: Mytob Virus Problem
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 23 Jun 2005 02:19:31 -0700
Contact Symantec and scream at them.
Any AV software that insists on deleting an infected attachment and then
passing on the message is worthless.
There is never ever ever never any reason to even think of passing on an
infected message whether you remove the attachment, rename it, replace it,
what ever.
A virus infected message is just that, a virus infected message. It has
absolutely no legit value and must be out right deleted. If you want to
quarantine the whole message for a couple of days and then delete, that is
fine.
But this non-sense of AV software giving you the option or making you delete
or change the attachment and then sending on the message is outright stupid.
John T
eServices For You
-----Original Message-----
From: Muhammad Ilyas [mailto:ilyas@xxxxxxxxxxx]
Sent: Thursday, June 23, 2005 12:29 AM
To: [ExchangeList]
Subject: [exchangelist] Mytob Virus Problem
http://www.MSExchange.org/
Dear All,
We are facing some problems regarding W32.Mytob.FU@mm (name
according to Symantec) worm. We have Symantec mail Security 4.6 installed on
our exchange 2000 server. Mail Security action for an infected message is
defined as "delete entire message" for all policies with no mail to internal
/ external sender. This is working fine in our environment for single mail
messages. But when a message is sent at groupaliases (e.g.
staff@xxxxxxxxxxx), message is delivered but infected attachment is deleted.
We are working on why that message is delivered as out action is set to
delete entire message.
Is anybody can help me to get this problem solved?
Any suggestions / measures to be taken against W32.Mytob.FU@mm worm. Anybody
can help?
Also which antivirus for exchange is best?
Thanks in advance,
Regards,
Muhammad Ilyas
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
