Why are you running ScanMail 3.02?  There are older versions than that you
can use.  Maybe it's time to downgrade.  

I think the problem is with ScanMail here.  I have a similar setup with
up-to-date software and my logs show that I catch that same virus.  Never
had that issue.

S.


-----Original Message-----
From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 12, 2001 10:26 AM
To: Exchange Discussions
Subject: RE: OWA Crashing...know cause!!!


I'm running ScanMail 3.02.  I have it set to delete the attachment if it's
infected.  I don't see an option to delete the actual message.

-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 12, 2001 10:18 AM
To: Exchange Discussions
Subject: RE: OWA Crashing...know cause!!!


Ummm, how about deleting the message?

-----Original Message-----
From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 12, 2001 7:20 AM
To: Exchange Discussions
Subject: OWA Crashing...know cause!!!


Exchange 5.5 SP4

I finally figured out what is causing our IIS to stop on our OWA servers.  I
had a user that received a message that was infected with the
"WORM_BADTRANS.B" virus (attachment "HAMSTER.DOC.pif").  ScanMail caught the
virus and deleted the attachment.

Now if the user gets into OWA and tries to open the message...it kills IIS
everytime.  I put the message in my mailbox and I also duplicated the
problem.  

Back to Microsoft for a fix!!!


Pete Pfefferkorn
Senior Systems Engineer/Mail Administrator
University of Cincinnati
51 Goodman Street
Cincinnati, OH  45221
Phone - (513) 556-9076
Fax -     (513) 556-2042


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to