RE: SoBig.E Virus Attachment Problem

  • From: Lloyd Williams <Williams@xxxxxxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 2 Jul 2003 15:37:32 -0400

The product is

Computer Associates eTrust Anti Virus Version 7.0

And eTrust Antivirus Option for Microsoft Exchange Mail Option version
7.0.343

 

-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, July 02, 2003 3:30 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem

 

http://www.MSExchange.org/

Something does not sound right. An AV product for Exchange should either be
working through the API to protect the information store as messages come in
and out of it, or act like an SMTP gateway. Doing background scanning of
mailboxes on a continual basis does not sound right.

 

What is the exact product name you are using?

 

John Tolmachoff MCSE CSSA

Engineer/Consultant

eServices For You

www.eservicesforyou.com

 

-----Original Message-----
From: Lloyd Williams [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, July 02, 2003 12:11 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem

 

http://www.MSExchange.org/

Yes I have the exchange antivirus add on. In fact we just upgraded from
version 4.0. Actually one thing I liked better in version 4.0 was you could
actively initiate a scan of users mailboxes. This doesn't seem possible in
version 7.0. This version just seems to have the real time option. Although
you can select background scanning which I presume scans users' mailboxes on
a continual basis when the server is not busy

Lloyd

 

-----Original Message-----
From: Jeffrey Robillard [mailto:jrobill@xxxxxxxxxxxxx] 
Sent: Wednesday, July 02, 2003 2:50 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem

 

http://www.MSExchange.org/

You have etrust 7 for antivirus for scanning the server... but do you have
the exchange mail antivirus add-on?    

 

  

-----Original Message-----
From: Lloyd Williams [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, July 02, 2003 2:48 PM
To: [ExchangeList]
Subject: [exchangelist] SoBig.E Virus Attachment Problem

http://www.MSExchange.org/

 

 Ever since last Friday when our Mail Server was flooded with SoBig.E
viruses I have had the following problem.

The server will run fine for 24 hours then will no longer process
attachments. The users get a message "cannot open attachments. I then reboot
and everything is fine again for about a day.

I have Exchange 5.5 with SP4 Running on a Windows 2000 SP3 member server.

We are running E-trust version 7 as our Antivirus Solution.

Has any one seen a similar problem? 

The server has a lot of free disk space (25 gigs or so) so I don't think
that's the problem.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
williams@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
williams@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: