_________________ John Bowles Exchange Engineer OIG/HHS W. 202.690.6342 C. 202.359.7159 F. 202.690.7446 [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
-----Original Message----- From: Tim Gowen [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 10:25 AM To: Exchange Discussions Subject: ScanMail missing tricks? A user got an infected attachment right to her Inbox, which doesn't ever happen here since we started using ScanMail. I have ScanMail 3.52 (Exch 5.5 SP4) blocking all the attachments on the List of Danger, and yet this BUGBEAR.B file - QABACKUP.EXE.SCR - got through to the Inbox. A Manual scan showed up six other virus-infected attachments which had apparently got through. But the manual scan does not pick up the file I just mentioned, which is now in my Deleted Items. A copy is on my hard drive and Sophos AntiVirus also doesn't detect it. Is it possible that ScanMail misses out on some messages if several arrive at once, or is there another more likely solution? I have sent the file to Trend and Sophos to see what they say, but the attachment blocking was, I thought, non-negotiable and always works. Luckily I badger my users about the danger of attachments on a fairly regular basis. Tim -- Tim Gowen RAF Museum IT Dept. Confidentiality: This e-mail and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this e-mail and highlight the error. Security Warning: Please note that this e-mail has been created in the knowledge that Internet e-mail is not a 100% secure communications medium. We advise that you understand and observe this lack of security when e-mailing us. Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should take steps to confirm that they are actually virus free. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
