Thanks for the info.
Mark
-----Original Message-----
From: Tom Buoniello
[mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 12, 2002 2:32
PM
To: MS-Exchange Admin Issues
Subject: RE: Virus
All,
EXCEEDINGLYINFECTED is not a
"Sybari Antigen false alarm" as described in the link given
below. This statement indicates that Antigen found more than 5 infected or file
filtered documents in a ZIP file attachment. The value 5 can be changed via a
registry key. I have included a description of this key here:
MaxCompressedFileInfections
This value specifies the
maximum amount of infections allowed in a compressed file. If it should exceed
the maximum, the entire file is marked for deletion. A value of zero represents
that an infinite amount of infections is allowed. The default value is 5
infections. Note, by default, entries into the Registry are Hex values. This is
not noticed until you put a value in that is greater then 9. Just remember if
you are putting in a value greater then 9, change the radio button from
Hexadecimal to Decimal.
Feel free to contact me should you have any further
questions.
Tom Buoniello
VP Product Management
Sybari Software.
-----Original Message-----
From: Mal Sasalu [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 12, 2002 12:15
PM
To: MS-Exchange Admin Issues
Subject: RE: Virus
This should answer your concern.
http://www.sophos.com/virusinfo/analyses/exceedinglyinfected.html
Mal
-----Original Message-----
From: Nelson Aguillon [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March
12, 2002 9:13 AM
To:
MS-Exchange Admin Issues
Subject:
RE: Virus
I received the same type of warning last week. It also
involved a zip file. I did not call Antigen.
Nelson
-----Original Message-----
From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March
12, 2002 5:06 AM
To:
MS-Exchange Admin Issues
Subject:
Virus
I received this from Antigen this morning.
"Antigen for Exchange found URLSnooper-106.zip
infected with ExceedinglyInfected virus."
I am guessing it found this zip to be infected with
multiple viruses. Or is there a virus called ExceedinglyInfected?
Just wondering if anyone knows.
Mark
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: