Re: virus scanning exchange db's

From: susan (smcrey_at_mindspring.com)
Date: 06/08/04


Date: Tue, 8 Jun 2004 14:47:04 -0500

I use CA's etrust antivirus version 7 (not my choice and i have been a very
unhappy user of this product). I have emailed them for comment on your
suggestion and instruction for "manual scan" as you state.

Will post the result of this inquiry.

Thank you SO much! I feel like i'm in a nightmare and if i can fix this
problem i'll be most grateful to all who have helped.

"Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> wrote in message
news:Od$yP8XTEHA.332@TK2MSFTNGP11.phx.gbl...
> You don't want to scan databases (such as exchange) with file space
scanner.
> Example, Officescan. But any decent exchange A/V product will do a manual
> scan of your exchange databases, safely.
>
> For example, if you were to install the Scanmail component of C/S/M suite
> into an existing Exchange environment, you would have real time scanning
in
> effect from that point on, but your existing mail stores would not be
> scanned unless you did a manual scan.
>
> --
> Les Connor [SBS MVP]
> -------------------------------------
> SBS Rocks !
>
>
>
> "susan" <smcrey@mindspring.com> wrote in message
> news:uBweBfXTEHA.2128@TK2MSFTNGP09.phx.gbl...
> > Thank you Maggie!
> >
> > When you say "manual scanning" of the Exchange Store, do you mean shut
> down
> > the services and scan the mdb's? I actually have been under the
impression
> > that process would chew them up... if you can, could you clarify?
> >
> > IMF will definitely be an option for me as our eTrust antivirus program
> will
> > NOT delete the email -- only remove the attachment.
> >
> >
> >
> > "Maggie Tzeng" <maggie_tzeng@trendmicro.com> wrote in message
> > news:1962a01c44d34$fd1115d0$a301280a@phx.gbl...
> > > If you have email antivirus software installed on the
> > > Exchange server, then you might want to run a manual
> > > scanning of the Exchange Store to see if that's where the
> > > virus resides. And normally the AV software gives an
> > > option to completely delete the message from delivery to
> > > the end user. Sometime this could be a separate
> > > configuration, such as in ScanMail for Microsoft Exchange
> > > from Trend Micro, the option is under Intelligent Message
> > > Filter.
> > >
> > > Regards,
> > > Maggie
> > >
> > > >-----Original Message-----
> > > >thank you!
> > > >i've scanned every single desktop and laptop in safe mode
> > > even. had one
> > > >reported instance in our remote office a few weeks ago
> > > and cleaned it up.
> > > >otherwise, as hard as i try -- i can't find any more.
> > > >
> > > >will using the new IMF allow me to dump these emails so
> > > the users will not
> > > >get them in their inbox?
> > > >
> > > >i must stop them from being delivered!!!
> > > >
> > > >"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]"
> > > <sbradcpa@pacbell.net>
> > > >wrote in message
> > > news:Ok3BJRaSEHA.3016@tk2msftngp13.phx.gbl...
> > > >> Don't scan the database as you will corrupt it and
> > > those notifications
> > > >> are normally bogus as viruses now spoof emails all the
> > > time.
> > > >>
> > > >> If you are scanning your drives [not Exchange] and
> > > workstations, you are
> > > >> fine.
> > > >>
> > > >> susan wrote:
> > > >>
> > > >> > if i suspect, due to an error in virus software
> > > configuration that
> > > >> > unfortunately went unnoticed for 3 days, that we have
> > > a virus, can I
> > > >virus
> > > >> > scan exchange databases?
> > > >> >
> > > >> > i have scanned the server itself -- with the exchange
> > > db's excluded from
> > > >the
> > > >> > scan per advisory from ms and etrust antivirus
> > > reports no virus'es,
> > > >worms,
> > > >> > trojans detected. BUT, i suspect we do have a
> > > problem. users get odd
> > > >emails
> > > >> > with avscan reports saying a virus was detected and
> > > removed (netsky and
> > > >> > beagle).... these often come from other users on the
> > > network !!
> > > >sometimes
> > > >> > those users are not even REAL users.
> > > >> >
> > > >> > i need to stop this problem. anyone have any
> > > suggestion for me? i'm very
> > > >> > concerned we're a mess.
> > > >> >
> > > >> >
> > > >>
> > > >> --
> > > >> http://www.sbslinks.com/really.htm
> > > >>
> > > >
> > > >
> > > >.
> > > >
> >
> >
>
>



Relevant Pages

  • CA eTrust Antivirus 7.0 - System account lockout
    ... remove the quarantine manually or the quarantine expires automatically ... eTrust Antivirus also has an email add-on option for Exchange which uses ... the local VSAPI in Exchange to scan attachments. ... Summer's Hottest Certification Just Got HOTTER! ...
    (NT-Bugtraq)
  • Re: eTrust Antivirus 7.1
    ... eTrust Antivirus 7.1 per Remote installiert bekommt hat, ... > würde gerne mal wissen ob jemand Erfahrung hat mit dem Produkt ... > als Proxy und dem integrierten Exchange als Mail-Server. ... Warum ist der Admin-Server nicht bei den geschützten Comutern zu ...
    (microsoft.public.de.security.netzwerk.sicherheit)
  • Re: Ongoing Virus problem
    ... I presume he meant except the dangerous Exchange folders one should never ... scan with file-based software. ... > If you are not running an Exchange based mail scanner, ... >> attachment and sometimes it doesn't (eTrust antivirus by CA). ...
    (microsoft.public.windows.server.sbs)
  • Re: Can I install CA Etrust AntiVirus Exchange Option on my Exchange 2
    ... >I am thinking about putting a local virus scanner on my Exchange 2003 server. ... >installing Computer Associates Etrust AntiVirus 7.1 Exchange Option. ... dire product) and anything by CA. Trend tend to be towards the top and ...
    (microsoft.public.exchange2000.general)
  • RE: Running out of space
    ... the newsgroups are staffed weekdays by Microsoft Support professionals to ... These folders contain the uninstallation files for these Windows ... Perform an online backup of the Exchange 2003 Information Store to purge ... 328804 How to Defragment Exchange Databases ...
    (microsoft.public.windows.server.sbs)