Re: Trend - emails with blocked attachments pass through

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Kevin Weilbacher (kweilbacMVP_at_gte.net)
Date: 06/29/04


Date: Tue, 29 Jun 2004 15:49:57 -0400

Les, good reasearch and hunting dow the solution.
U DA MAN, even if you do live north of the border!

-- 
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"
"Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> wrote in message
news:OykpyChXEHA.2716@tk2msftngp13.phx.gbl...
> Hi Irshad,
>
> It turns out either Scanmail or eManager generates these replacement
> attachments or message bodies. It's something internal, the text cannot be
> changed. Just looking into it now. I think the action you want is to
delete
> any email and/or attachment that is infected - so that it doesn't show up
in
> the users inbox. Right ?
>
>
http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=15272
>
> -- 
> Les Connor [SBS MVP]
> -------------------------------------
> SBS Rocks !
>
>
>
> "IK" <ik@no.spam.please.com> wrote in message
> news:%23OkQ1IgXEHA.2364@TK2MSFTNGP12.phx.gbl...
> > Les,
> >
> > Thanks for your answer but I tested myself by sending an email with an
> > attachment and the email arrives with
> > REMOVED_BY_THE_EXCHANGE_EMAIL_SCANNING_SERVICE_*.txt message so it is
> > definitely not a spam.
> >
> > If I deselect Active Message Filter then it comes in with the following
> > replacement txt file
> > ATTACHMENT_OR_CONTENT BLOCKING test.bat (the file I sent).
> >
> > So Trend is reacting but I don't know how to delete it completely.
> >
> > Irshad
> >
> > "Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> a écrit dans le message
> de
> > news:uTMvVYfXEHA.3564@TK2MSFTNGP11.phx.gbl...
> > > That email has nothing to do with Trend, that email is coming in as
you
> > see
> > > it from outside. That >
> > > REMOVED_BY_THE_EXCHANGE_EMAIL_SCANNING_SERVICE_*.txt. is not being
> > generated
> > > by Scanmail or emanager.
> > >
> > >
> > > It's spam.
> > >
> > > -- 
> > > Les Connor [SBS MVP]
> > > -------------------------------------
> > > SBS Rocks !
> > >
> > >
> > >
> > > "IK" <ik@no.spam.please.com> wrote in message
> > > news:eymrSOfXEHA.2716@tk2msftngp13.phx.gbl...
> > > > Hi,
> > > >
> > > > We've Trend C/S/M SMB 2.0 and we use Trend's Attachment Blocking
> > Settings
> > > to
> > > > block all the classic extensions, we've also selected Active Message
> > > Filter
> > > > for Inbound messages but the emails get delivered anyway with the
> > > attachment
> > > > stripped off and replaced by a message
> > > > REMOVED_BY_THE_EXCHANGE_EMAIL_SCANNING_SERVICE_*.txt.
> > > >
> > > > The Exchange Attachment blocking function in CEICW is disabled. It
is
> > very
> > > > annoying to get these emails instead of entire email being deleted.
> > > >
> > > > As always any solutions or suggestions would be greatly appreciated.
> > > >
> > > > Irshad
> > > >
> > > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: spamassassin results in mail headers
    ... # This is the right place to customize your installation of SpamAssassin. ... add_header spam Flag _YESNOCAPS_ ... # Les autres langues auront un malus. ... #On indique les quotas pour SpamAssassin: ...
    (Ubuntu)
  • Re: Lean esto y no se arrepentiran
    ... piensen que es su destino el que les "presta" para ... que lleguen a lograr lo que necesitan. ... esto es SPAM. ...
    (sci.electronics.repair)
  • Re: Cleaning up a dire tape...
    ... don't you get a whole lot of spam having ... your email address "unmunged" in a public group? ... > Hi Les. ... Prev by Date: ...
    (uk.rec.audio)
  • Re: ???? ??? ????? ???????? ???????
    ... I just wonder how much band width is wasted by peoples responses to spam. ... I bet it is more than the original spammers waste. ... Les W ...
    (uk.rec.subterranea)
  • Re: Alerts in SharePoint and other services
    ... I am going to leave you in the very capable hands of Les (and have a look at ... SteveG's reply too) as I know nothing about Trend. ... "Lise" schreef in bericht ... On the Change monitoring Reports, ...
    (microsoft.public.windows.server.sbs)