Re: NAV Keeps finding a virus in non-existant files!

From: Hank Arnold (rasilon_at_aol.com)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 04:46:19 -0500

I had already done this. I've seen the "My data sore file had a virus and
the AV deleted it!!!" messages. The regularly scheduled NAV scan excludes
the entire C:\EXCHSRVR directory. That's what was puzzling me. The notices
show a time stamp of about 4:30AM. The NAV scan on the exchange server is
done at 1:00AM. It looks like the alerts are not there today. I'm starting
to suspect that it was finding the problems in some log files that were in
the recycle bin.

Oh, well...... If they come back, so will I.... ;-) 

-- 
Regards,
Hank Arnold
"Dan Townsend [MSFT]" <dtown@online.microsoft.com> wrote in message
news:OJhO$RG$DHA.2808@TK2MSFTNGP10.phx.gbl...
> You need to exclude the Exchange folders from file-level scans.  The
> Exchange Aware AV will handle this mail.
>
> -- 
> Hope that helps,
> Dan Townsend
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> Please do not send email to this address, post a reply to this newsgroup.
>
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
> "Hank Arnold" <rasilon@aol.com> wrote in message
> news:uG9SECG$DHA.2592@TK2MSFTNGP10.phx.gbl...
> > We run Norton Antivirus CE (V7.5) on our servers along with the Exchange
> > aware plug-in. I monitor the Symantec System Console and it keeps
showing
> > our Exchange server as having a virus. When I check the log, I see that
it
> > keeps saying that it found a virus in about 100 files. They all are in
the
> > C:\EXCHSRVR\imcdata\in directory. However, when I look there, I don't
see
> > it. They are all of the form 1N6JG6Q7. I've searched the entire drive
and
> > they are no where to be found.
> >
> > Any ideas on how to investigate this further??
> >
> > -- 
> > Regards,
> > Hank Arnold
> >
> >
> >
>
>

Relevant Pages

  • Re: 480623kb messages in queue
    ... I have been able to virus scan on it and it is clean...I ... the queue location to an external hard drive in IIS but it did not listen to ... PS why not enable circular logging, I thought it would reduce size? ... >>I stop all exchange services and am able to delete the messages but when I ...
    (microsoft.public.exchange.admin)
  • Re: Ok, strange thing
    ... What AV software are you using for Exchange, your server's file system, your ... Anyone allowed to relay, even via authenticated relay? ... > email with a virus. ... > I have a few of this NDRs with different erros, no user found, no host ...
    (microsoft.public.exchange2000.connectivity)
  • Re: Ok, strange thing
    ... What AV software are you using for Exchange, your server's file system, your ... Anyone allowed to relay, even via authenticated relay? ... > email with a virus. ... > I have a few of this NDRs with different erros, no user found, no host ...
    (microsoft.public.exchange2000.admin)
  • Re: Ok, strange thing
    ... What AV software are you using for Exchange, your server's file system, your ... Anyone allowed to relay, even via authenticated relay? ... > email with a virus. ... > I have a few of this NDRs with different erros, no user found, no host ...
    (microsoft.public.exchange2000.general)
  • Re: NAV Keeps finding a virus in non-existant files!
    ... The folders are definitely excluded by the file scanner. ... have an Exchange aware plug-in that scans e-mail as it comes in. ... > "Hank Arnold" wrote in message ...
    (microsoft.public.exchange.admin)