RE: SoBig.E Virus Attachment Problem

  • From: "Jeffrey Robillard" <jrobill@xxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 2 Jul 2003 15:39:58 -0400

the etrust antivirus exchange option uses the api..  well, at least mine does.

-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, July 02, 2003 3:30 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem


http://www.MSExchange.org/


Something does not sound right. An AV product for Exchange should either be 
working through the API to protect the information store as messages come in 
and out of it, or act like an SMTP gateway. Doing background scanning of 
mailboxes on a continual basis does not sound right.

 

What is the exact product name you are using?

 

John Tolmachoff MCSE CSSA

Engineer/Consultant

eServices For You

www.eservicesforyou.com

 

-----Original Message-----
From: Lloyd Williams [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, July 02, 2003 12:11 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem

 

http://www.MSExchange.org/

Yes I have the exchange antivirus add on. In fact we just upgraded from version 
4.0. Actually one thing I liked better in version 4.0 was you could actively 
initiate a scan of users mailboxes. This doesn't seem possible in version 7.0. 
This version just seems to have the real time option. Although you can select 
background scanning which I presume scans users' mailboxes on a continual basis 
when the server is not busy

Lloyd

 

-----Original Message-----
From: Jeffrey Robillard [mailto:jrobill@xxxxxxxxxxxxx] 
Sent: Wednesday, July 02, 2003 2:50 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Attachment Problem

 

http://www.MSExchange.org/

You have etrust 7 for antivirus for scanning the server... but do you have the 
exchange mail antivirus add-on?    

 

  

-----Original Message-----
From: Lloyd Williams [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, July 02, 2003 2:48 PM
To: [ExchangeList]
Subject: [exchangelist] SoBig.E Virus Attachment Problem

http://www.MSExchange.org/

 

 Ever since last Friday when our Mail Server was flooded with SoBig.E viruses I 
have had the following problem.

The server will run fine for 24 hours then will no longer process attachments. 
The users get a message "cannot open attachments. I then reboot and everything 
is fine again for about a day.

I have Exchange 5.5 with SP4 Running on a Windows 2000 SP3 member server.

We are running E-trust version 7 as our Antivirus Solution.

Has any one seen a similar problem? 

The server has a lot of free disk space (25 gigs or so) so I don't think that's 
the problem.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
williams@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: