Why are you running ScanMail 3.02? There are older versions than that you can use. Maybe it's time to downgrade.
I think the problem is with ScanMail here. I have a similar setup with up-to-date software and my logs show that I catch that same virus. Never had that issue. S. -----Original Message----- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 12, 2001 10:26 AM To: Exchange Discussions Subject: RE: OWA Crashing...know cause!!! I'm running ScanMail 3.02. I have it set to delete the attachment if it's infected. I don't see an option to delete the actual message. -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 12, 2001 10:18 AM To: Exchange Discussions Subject: RE: OWA Crashing...know cause!!! Ummm, how about deleting the message? -----Original Message----- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 12, 2001 7:20 AM To: Exchange Discussions Subject: OWA Crashing...know cause!!! Exchange 5.5 SP4 I finally figured out what is causing our IIS to stop on our OWA servers. I had a user that received a message that was infected with the "WORM_BADTRANS.B" virus (attachment "HAMSTER.DOC.pif"). ScanMail caught the virus and deleted the attachment. Now if the user gets into OWA and tries to open the message...it kills IIS everytime. I put the message in my mailbox and I also duplicated the problem. Back to Microsoft for a fix!!! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]