RE: mm worms on M: exchange 2000
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Fri, 24 Jun 2005 10:45:11 -0700
And you will continue to chase your tail until you use a AV product capable
of properly scanning messages for malicious content, including password
protected encrypted zip files which no AV software can scan inside. They
have to relay on file names and message body content to create the signature
with.
What exact Symantec product are you using?
FYI, AV removal tools are generally for the desktop, not for data stores
like the Exchange IS.
John T
eServices For You
> -----Original Message-----
> From: Michelle [mailto:estradam@xxxxxxxxxxxxxxxxxx]
> Sent: Friday, June 24, 2005 9:57 AM
> To: [ExchangeList]
> Subject: [exchangelist] mm worms on M: exchange 2000
>
> http://www.MSExchange.org/
>
> I've been fighting mass mailing worms for 2 weeks now. Run removal tools
> from Symantec's sight, shows nothing. Of course, you have to exclude the
> M: for Exchange 2000. When I run a virus scan, they show up on the M:.
> I've been running Symantec's Intelligent Updates on a daily basis, Virus
> scans and manually deleting mail containing viruses on a daily basis. It
> seems like I may be chasing my tail.
>
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
