You have to enter the extensions to block under Scan Policy ~ blocking. -----Original Message----- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:44 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Yep got that.... but how do I configure the gateway to stop all .exe's .. not just scan and deliver.. but to quarantine them all.... -----Original Message----- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:29 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS If you have NAVCE, the Gateway product will block attachments -----Original Message----- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachments....I would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on....???? -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -----Original Message----- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere.... it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily.... I did read about a software called bodetect that claims to stop this kind of programme.... and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares....???? In case any one of you is interested.. just go to www.winwhatwhere.com regards _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
