I would think you would want to complain to TotalSystems concerning
this.  I doubt anyone on this list had anything to do with setting up
their MailSweeper product.




Bob Sadler

-----Original Message-----
From: Mark Harford [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 07, 2001 7:49 AM
To: Exchange Discussions
Subject: VBS Blocking



This is ridiculous!  I have just had my last message rejected as being a
Vbscript virus because it had the phrase "Outlook Application" in the
plain
text message body.  The entire log file was also included in the message
sent to me which surely is not a good idea.

Anyone else set up Mailsweeper to be quite so severe?

The relevant entry in the log is as follows:-


13:38:09.62 (VAL:002) DetectVBS - PerformIf matched
containerclass=="Text".
13:38:09.62 (LEX:003) Found phrase Value 100, Text "Outlook application
"
13:38:09.62 (LEX:003) Total Value = 100, Loading = 1, result = "HaveVBS"
13:38:09.62 (MSW:002) Validator 'DetectVBS' returned "HaveVBS"
13:38:09.62 (MSW:001) Validating Node '0' - '' ''
13:38:09.62 (MSW:002)   Attribute 'AttachmentSize' = 4043
13:38:09.62 (MSW:002)   Attribute 'NodeId' = '0'
13:38:09.64 (LEX:003) Total Value = 0, Loading = 1, result = ""
13:38:09.64 (MSW:001) Following disposal route "VBSFile".
13:38:09.64 (MSW:002) Quarantine disposal
13:38:09.84 (MSW:001) Message quarantined in "Blocked Messages" as entry
"A0011217".


A bit OTT I think!

mark

-----Original Message-----
From: MAILsweeper [mailto:[EMAIL PROTECTED]] 
Sent: 07 September 2001 13:38
To: '[EMAIL PROTECTED]'
Cc: Postmaster
Subject: A Copy of a VBS Virus may have been detected in this message.


A mail message has been found containing VBscript-ing language. 
There is a potential that this could contain malicious code. 
 <<logfile.txt>>  <<body.txt>> 


This e-mail, and any attachment, is confidential. If you have received
it in error, please delete it from your system, do not use or disclose
the information in any way, and notify me immediately. The contents of
this message may contain personal views which are not the views of the
BBC, unless specifically stated.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to