Follow up. I forgot to mention. The sophos engine should be installed on the desktop PC's. It sounds like you might have been hit with the goner.scr. There are manual removal instructions for this virus and sophos has the updated ide file to remove the virus.
I would also install the engine on all of your servers....... Also.... Better get use to it because this is an everyday thing. -----Original Message----- From: Murphy, Brian [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 05, 2001 10:36 AM To: Exchange Discussions Subject: RE: blocking message Brett- Sorry to hear of your recent trials. Hopefully you will use this as a learning experience and not let it get you down. This is what I would do. I'm not sure if Sybari offers an eval of their Antigen product but I would visit www.sybari.com and try to get a 30 day eval. Install this on your server immediatley and configure File Filtering on Incomming and Outgoing INternet Mail. Hopefully your situation will force the company you work for to realize the importance of spending some money for protection. This tends to be a hard sell until you actually get "hit" with something. FYI: I believe you stated that you are running Exc 5.0. I believe there is a patch you need to install for the Sybari Engine for it to work with Exch 5.0. It will work but you need to install the patch. Check with support before installing the demo. Get a quote from Sybari and attempt to purchase the software ASAP. This software can be a lifesaver (jobsaver). Also. Dowload Sophos scanning engine from www.sophos.com. Download the latest IDE Files. Install the eval. Purchase the software ASAP. Download the IDE file from http://www.sophos.com/downloads/ide/goner-a.ide Download a ZIP file containing all the IDE files available for the current version of Sophos Anti-Virus from http://www.sophos.com/downloads/ide/ides.zip Read about how to use IDE files at http://www.sophos.com/downloads/ide/using.html There are some other solutions available to you but this one will get you up and running quick. -----Original Message----- From: Brett Wesoloski [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 05, 2001 10:26 AM To: Exchange Discussions Subject: RE: blocking message Well I must thank everyone for there nice comments. I would just like to say I have loved this group for all there help but until you are put in my situation you should not comment. I am in charge of 25 servers. 50 users. 2 custome built applications. I have been working 18 hours a day since the exchange server went down. Getting everything going. I am in charge of our SQL server. It has been having troubles. I have put things on a list as to what needs to be fixed now and doing them. I was hoping no new viruses would come out my luck this week well I have found out there is a new one. I was hopeing that I could make a rule on exchange in the mean time while I install our virus software now very important. I know I can through outlook but that is for each user. So thanks for the comments. To Nathan you listen. Very wise he is. Deploy sybari you will. > > S. > > -----Original Message----- > From: Black, Nathan [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, December 05, 2001 11:14 AM > To: Exchange Discussions > Subject: RE: blocking message > > > Your users are now suffering from the block and pen[1] syndrome. > > [1] Me user dumb, click on Gone.scr, but me admin dumber and not fix server, > now we use Block of Post-It-Notes and a Pen. > > Nathan > > > -----Original Message----- > > From: Brett Wesoloski [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, December 05, 2001 9:53 AM > > To: Exchange Discussions > > Subject: blocking message > > > > > > Is it possible to block a message with a subject for everyone. > > > > My exchange server went down last week. Have not had a > > chance to get the > > virus protection software on it yet. We are getting killed by the new > > one. I am running exchange 5.0 have not had time to upgrade > > to 5.5 yet. > > > > TIA, > > Brett > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
