Thanks Mike, My SCR target event log was generating errors on 1 particular log. So I went to the source and scanned that particular log file with McAfee without cleaning/repairing option and it detected the Trojan. I have followed the link long back and excluded the required files from scanning. I'll go thru it once again. But how can I make sure that the logs or DB's are not infected with Trojans or virus. TIA Liby
From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, August 18, 2010 2:34 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 SCR replication logs infected with trojan You should not be scanning the log files. Ever. Exclude that directory and remove all the log files from quarantine, restoring them to their original location. See <http://theessentialexchange.com/blogs/michael/archive/2010/06/16/antivirus-exclusions-and-windows.aspx> and the articles linked from that article, especially <http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx> Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Liby Philip Mathew [mailto:lmat...@path-solutions.com] Sent: Wednesday, August 18, 2010 6:24 AM To: MS-Exchange Admin Issues Subject: Exchange 2007 SCR replication logs infected with trojan Hi, I have a SCR replication log file infected with a Trojan which is not replicating to the SCR target. McAfee identified it as a JS/Redirector.z on the source. How can I get rid of this Trojan without deleting the log so that the SCR replication will continue? How can I avoid future infection to the logs? Regards Liby ________________________________ Disclaimer [The information contained in this e-mail message and any attached files are confidential information and intended solely for the use of the individual or entity to whom they are addressed. This transmission may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you have received this e-mail in error, please notify the sender immediately and delete all copies. If you are not the intended recipient, any disclosure, copying, distribution, or use of the information contained herein is STRICTLY PROHIBITED. Path Solutions accepts no responsibility for any errors, omissions, computer viruses and other defects.]
