VS API

  • From: "Pete Moran" <msexchange@xxxxxxxxxxxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 16 Aug 2004 21:41:39 +0800

Hi All,

We've been using Network Associates' Groupshield for years, and
experimenting with GFI's MailSecurity scanner for the Exchange Virus
Scanning API.

In both experiences the documentation says that it's not possible simply to
remove a virus email, that a "skeleton" message with a message saying a
virus was removed is still sent to the user's message store.

For either Groupshield or MailSecurity you have a ".txt" attachment with a
message saying that a virus was removed. Users won't touch these attachments
and phone the helpdesk; "I think I've received a virus"!!!

I can't believe that Microsoft have left us such a brain dead solution. I
don't want a message saying a virus was removed, just delete the whole
thing, or better yet, not accept the message at all into the server!

Network Associates and GFI say it's Microsoft's problem. Of course, GFI say
if you use MailSecurity in gateway mode you can delete it.

Also, frequently these virus skeleton messages trip up POP3 client's like
Outlook Express, by causing them to stall trying to retrieve that message.
We have to manually delete it using IMAP and the POP3 client can "go" again.
This is really annoying with 500 users on one of our client's servers.

Any comments?

Regards,

Pete Moran



Other related posts: