Step A. STOP running a file lever Scanner in any of the Exchange
directories on the server.
Those were email messages.
--Kevinm M, WLKMMAS, UCC+WCA, CKWSE, CKST, HWPHHIICP
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Martinez
Sent: Thursday,
-Original Message-
From: John Martinez [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 19:58
To: Exchange Discussions
Subject: Suspicious files
Hi all,
My anti virus just reported a couple of infected files that I
don't recognize.
WSPFT2TW
WSPFT2TV
They were both
Don't run a file level AV scanner against your exchange directories... Use
a product intended for Exchange. I am rather partial to Antigen ;)
~
-K.Borndale
Network Administrator
Sybari Software
631.630.8569 -direct dial
631.439.0689 -fax
What happens when you scan the priv.edb file?
-Original Message-
From: John Martinez [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 2:58 PM
To: Exchange Discussions
Subject: Suspicious files
Hi all,
My anti virus just reported a couple of infected files that I don't
With the AutoClean option turned on.
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 3:04 PM
To: Exchange Discussions
Subject: RE: Suspicious files
What happens when you scan the priv.edb file?
-Original Message-
From: John
That's where I'm going wrong. I've always scanned it with my scanner set to
delete infected files.
-Original Message-
From: Soysal, Serdar [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 20:06
To: Exchange Discussions
Subject: RE: Suspicious files
With the AutoClean option
Ouch!
-Original Message-
From: Robert Moir [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 10:08
To: Exchange Discussions
Subject: RE: Suspicious files
That's where I'm going wrong. I've always scanned it with my scanner set to
delete infected files.
-Original Message
STOP!!! Turn that file level AV off NOW!!
-Original Message-
From: John Martinez [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 11:58 AM
To: Exchange Discussions
Subject: Suspicious files
Hi all,
My anti virus just reported a couple of infected files that I don't
But, isn't that how you should keep the size of the IS within reason?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Moir
Sent: Thursday, December 13, 2001 2:08 PM
To: Exchange Discussions
Subject: RE: Suspicious files
That's where I'm going
PROTECTED]]
Sent: 13 December 2001 20:28
To: Exchange Discussions
Subject: RE: Suspicious files
But, isn't that how you should keep the size of the IS within reason?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Moir
Sent: Thursday
You guys better watch it. This guy might think you're serious.
-Original Message-
From: Barry Patterson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 3:28 PM
To: Exchange Discussions
Subject: RE: Suspicious files
But, isn't that how you should keep the size
-
From: Barry Patterson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 8:28 PM
To: Exchange Discussions
Subject: RE: Suspicious files
But, isn't that how you should keep the size of the IS within reason?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
files
But, isn't that how you should keep the size of the IS within reason?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Moir
Sent: Thursday, December 13, 2001 2:08 PM
To: Exchange Discussions
Subject: RE: Suspicious files
That's where I'm
-Original Message-
From: Robert Ellis [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 20:28
To: Exchange Discussions
Subject: RE: Suspicious files
I really hope people don't stumble on this thread and take
you guys seriously! :-)
I hope so too, because everyone knows you
-Original Message-
From: Jim Helfer [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 20:33
To: Exchange Discussions
Subject: RE: Suspicious files
About how long should that take on a 20 Gig store? Now that
it's started,do I have time to run out for dinner?
Do
:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 8:27 PM
To: Exchange Discussions
Subject: RE: Suspicious files
That, and it settles all arguments about what deleted items retention should
be set at.
--
Robert Moir, MSMVP
IT Systems Engineer,
Luton Sixth Form College
Rome did not create
by having management meetings
-Original Message-
From: Robert Ellis [mailto:[EMAIL PROTECTED]]
Sent: 13 December 2001 20:30
To: Exchange Discussions
Subject: RE: Suspicious files
How's luton this evening? I'm down in Hampshire.
Regards,
Rob Ellis
Messaging Consultant
PROTECTED]
-Original Message-
From: Robert Moir [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 8:35 PM
To: Exchange Discussions
Subject: RE: Suspicious files
Cold, and wet when it can remember that bit.. But the server I was
kicking...er.. Fixing Appears to be stable thank
Ellis [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 12:39 PM
To: Exchange Discussions
Subject: RE: Suspicious files
I'm currently looking at some problems from the dialled-up warmth of my
g/f's flat. Weirdy ADC things happening.
Regards,
Rob Ellis
Messaging Consultant
Service
]
-Original Message-
From: Barry Patterson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 8:28 PM
To: Exchange Discussions
Subject: RE: Suspicious files
But, isn't that how you should keep the size of the IS within reason?
-Original Message-
From: [EMAIL
20 matches
Mail list logo
