Re: FW: Virus alert details[Scanned]
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Fri, 10 Jun 2005 23:31:00 -0700
In this day and age, if you are only blocking 2-3 e-mails per day as virus
infected something may be wrong.
NOTE: AV scanners can not scan inside of an encrypted password protected zip
type file. They can only identify it by characteristics of the zip file and
the header, subject and body of the associated message.
John T
eServices For You
> -----Original Message-----
> From: Jalal, Ahmed [mailto:ajalal@xxxxxxxxxxxxxxxxxxx]
> Sent: Friday, June 10, 2005 8:04 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: FW: Virus alert details[Scanned]
>
> http://www.MSExchange.org/
>
> Should I be worried if the email virus scanner (Groupshiled 6.0) on my
> Exchange 2003 server only blocks 2-3 emails/day? I have it setup to
> notify me via email if an email is blocked if it contains a virus or a
> bad attachment. Every morning I check on that, and I only find 2-3
> emails that were blocked. Sometimes not even that.
>
> Whenever I test the virus scanning using the EICAR test virus, it works
> just like it should, the virus gets blocked. No user has gotten a virus
> on their computer for a couple of months, at least from an email. We
> have ~60 active users and around 1500 email/day coming from outside.
>
> It just seems odd.
>
> -----Original Message-----
> From: Dee Arnold [mailto:Deea@xxxxxxxx]
> Sent: Friday, June 10, 2005 8:37 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: FW: Virus alert details[Scanned]
>
> http://www.MSExchange.org/
>
> I've blocked hundreds over the last week. I'm using Mailmarshal for
> Exchange.
>
>
> -----Original Message-----
> From: Maglinger, Paul [mailto:PMAGLINGER@xxxxxxxx]
> Sent: Friday, June 10, 2005 8:36 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: FW: Virus alert details[Scanned]
>
> http://www.MSExchange.org/
>
> What are you using to block?
>
> -----Original Message-----
> From: simon whale [mailto:simon@xxxxxxxxxxxxxx]
> Sent: Friday, June 10, 2005 8:06
> To: [ExchangeList]
> Subject: [exchangelist] Re: FW: Virus alert details[Scanned]
>
> http://www.MSExchange.org/
>
> Have also blocked / deleted around 10/20 this week alone
>
> Simon
>
> -----Original Message-----
> From: Jonathan Jesse [mailto:jjesse@xxxxxxxx]
> Sent: 10 June 2005 13:58
> To: [ExchangeList]
> Subject: [exchangelist] Re: FW: Virus alert details[Scanned]
>
> http://www.MSExchange.org/
>
> I have blocked two so far today
>
> On Thu, 2005-06-09 at 16:28 -0500, Maglinger, Paul wrote:
> > http://www.MSExchange.org/
> >
> > Anyone seen this coming through?
> >
> > http://vil.nai.com/vil/content/v_134178.htm
> >
> > Paul Maglinger
> > Systems Administrator
> > Shoe Carnival, Inc.
> > pmaglinger@xxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com Leading
> > Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> > Security Resource Site: http://www.windowsecurity.com/ Network
> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org Discussion List
> as: jjesse@xxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network
> Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
> Resource Site: http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> simon@xxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
>
> This email and any files transmitted with it are confidential and
> intended
> solely for the use of the individual or entity to whom they are
> addressed. If
> you have received this email in error please notify
> admin@xxxxxxxxxxxxxxx
>
> The views expressed in this email are those of the individual and not
> necessarily those of UK Data IT
>
> This footnote also confirms that this email message has been swept by
> SOPHOS
> AV for the presence of computer viruses.
>
> Web site: www.ukdatait.co.uk
>
> Registered Office: UK Data IT House, Shrub HIll Road, Worcester, WR4 9EF
> Registered Company Number: 3884834
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network
> Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
> Resource Site: http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> pmaglinger@xxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network
> Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
> Resource Site: http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> deea@xxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
>
>
> #####################################################
> ###################
> #############
> Only the individual sender is responsible for the content of the
> message, and the message does not necessarily reflect the position or
> policy of the Texas State Teachers Association or its affiliates.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> ajalal@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
