Is everybody getting hit by Novarg about 3 times a minute? I have checked every system in the building for infection and cannot find any. Using Exch 5.5 with Groupshield and I receive a new mail every 30 seconds with a dodgy attachment. At first I thought the relay had been infected but their were no signs of this.
Any clues or hints on where to check? MS SMTP Relay->GFI MailEssentials->Exchange 5.5 is the route that our mail takes. -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED] Sent: 27 January 2004 18:14 To: Exchange Discussions Subject: RE: novarg virus question http://tinyurl.com/kvtk -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Easton Sent: Tuesday, January 27, 2004 10:11 AM To: Exchange Discussions Subject: RE: novarg virus question I tried that and would not resolve. thanks -----Original Message----- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 27, 2004 1:03 PM To: Exchange Discussions Subject: RE: novarg virus question Copy and past the link cause it wrapped. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Easton Sent: Tuesday, January 27, 2004 10:05 AM To: Exchange Discussions Subject: RE: novarg virus question can you send out the tech article ## or the title because the url did not come through. Thanks -----Original Message----- From: Alverson, Tom [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 27, 2004 12:52 PM To: Exchange Discussions Cc: '[EMAIL PROTECTED]' Subject: RE: novarg virus question If you really want to run a file based antivirus on your exchange server, here are the instructions on what to avoid for Symantec antivirus: http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2000110108382454?Ope nDocument&src=ent_hot&dtype=corp&prod=Norton%20AntiVirus%20for%20Microsoft%2 0Exchange&ver=2.x&tpre= -----Original Message----- From: Chad [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 27, 2004 12:03 PM To: Exchange Discussions Subject: novarg virus question Running exchange 5.5 , symantec virus scan quarantined edb.log and 2 .dat files in the MTA folder. Symantec's virus removal instructions say to delete the infected files, however when doing that with edb.log it exchange wouldn't run due to unexpected time stamp? Sorry for the newbie question, just trying to help our exchange admin here. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
