Title: Message
there may not be virus problems -
 
DITTO what Greg said...NAV will go through the information store and apply the rules you have implemented to existing email in everyone's mailboxes.
 
Anything it finds will result in the actions you have set up.. i.e.  delete, quarantine, notify etc.
 
The notification emails will be sent regardless of any users being logged in.
 
I would set the rules to quarantine everything the 1st shot so you don't lose emails or attachments.
 
If you ever move mailboxes from one store to another in the future it will do the same thing  and dig up more rule violations.
 
W. Andrew Philips
Customer Service Manager
Networks Plus
(785) 587-4121 x202
(785) 267-6800 x202
 
 
-----Original Message-----
From: Ben Ong [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 09, 2002 2:23 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange Server infected.

6 of the mailbox is having these problem, I delete all the mailbox and recreate a new mailbox. Still not work.

I even switch the NAVMSE from VAPI/MAPI to MAPI mode, and do a manual scan, no virus was found in all mailboxs.

 

Thanks

Ben

 

 

-----Original Message-----
From: Zangara, Jim [mailto:[EMAIL PROTECTED]]
Sent: 09 May 2002 13:19
To: MS-Exchange Admin Issues
Subject: RE: Exchange Server infected.

 

Are you sure that is the case?

Klez masks the sender so it could be from a third party that is not associated with you at all.

Run a scan and look at your logs.

Jim Zangara, MCSE+I, A+
IT Manager
Special Projects Engineer
Premiere Radio Networks
A Division of Clear Channel Communications
15260 Ventura Blvd Suite 500
Sherman Oaks, CA 91403
Direct: (818) 461-8620
mailto:[EMAIL PROTECTED]

 

-----Original Message-----
From: Ben Ong [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 08, 2002 9:04 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange Server infected.

 

Yes, I had turn on the blocking of file attachment. (NAVMSE 2.18)

I'm puzzle that why the email was send out even without the user of that mailbox login to his PC.

Thanks

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 09 May 2002 09:57
To: MS-Exchange Admin Issues
Subject: RE: Exchange Server infected.

Have you recently turned on File Attachment Blocking?  It looks like somebody has.  NAVMSE is scanning through all the mailboxes and deleting attached files with extensions in the list set up in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\NAVMSE\2.5\BlockingPolicy\Attachmen

t (the 2.5 will match whatever version you have, I believe 2.1 was the first version to support this).

 

Greg Ewy
Trilogy Systems
515-964-9505
mailto:[EMAIL PROTECTED]

 

-----Original Message-----
From: Ben Ong [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 08, 2002 8:54 PM
To: MS-Exchange Admin Issues
Subject: Exchange Server infected.

 

Hi,
I suspect my exchange sever having some kind of infection.

I got a few mailboxs which sending email by it own, even when user PC was not on.

Helps!!!

Thanks
Ben

-----Original Message-----
To: postmaster
Subject: Admin Alert: Norton AntiVirus detected a virus in a message. The infected file was deleted.

Sender of the infected attachment:  webmaster
Recipient of the infected attachment:  Tham Kok Yun\Inbox Subject of the
message:  And Resources One or more attachments were deleted.
  Attachment nowrap.exe was Deleted for the following reasons:
    Virus UNAUTHORIZED FILE was found.

 ATTENTION! The information contained in this E-mail may be CONFIDENTIAL and PRIVILEGED. It is intended for individual or entity named above. If you are not the intended recipient, please be notified that any use, review, distribution or copying of this E-mail is strictly prohibited. If you have received this E-mail by error, please delete it and notify the sender immediately. Thank you.

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm

 

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm

 ATTENTION! The information contained in this E-mail may be CONFIDENTIAL and PRIVILEGED. It is intended for individual or entity named above. If you are not the intended recipient, please be notified that any use, review, distribution or copying of this E-mail is strictly prohibited. If you have received this E-mail by error, please delete it and notify the sender immediately. Thank you.

List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

ATTENTION! The information contained in this E-mail may be CONFIDENTIAL and PRIVILEGED. It is intended for individual or entity named above. If you are not the intended recipient, please be notified that any use, review, distribution or copying of this E-mail is strictly prohibited. If you have received this E-mail by error, please delete it and notify the sender immediately. Thank you.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

Reply via email to