Matt, I must say that our Trend Micro Exchange-aware virus scanner (Scanmail, I believe) detected the virus sent to this list yesterday. I dare say that not a one of these viruses made it through to our Internal network, but I do know that if it did miss it coming in, when it does a full scan on the mailbox it will catch it. -----Original Message----- From: Matt Rogghe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 13, 2001 08:44 AM To: '[EMAIL PROTECTED]' Subject: RE: Just an interesting note here and maybe a request for feedback. I first found the virus yesterday after I got back from lunch and had something like 10-15 e-mails from the users here in my office... all the virus. Four users here had opened the attachment before I could stop them. Since I had just, minutes before, received those e-mails, I ran to the server and yanked the connection between the firewall and the mail server.... deleted all outbound e-mails from the exchange server queue (users will at least get a non-delivery if it was genuine business).... cleaned off the PC's and then re-connected the server. Now, I work in a small office (~25 users) so I can do this sort of thing with impunity where some of you guys in bigger installations probably can't, but my real question here is: are there any good Exchange virus/content scan agents out there? I took a look at a few a short while back and again yesterday and was discouraged to note that not a single one would identify the Kournikova virus unless you had updated the software with a patch released sometime yesterday.... probably a little too late. I suppose I could purchase one of these and simply quarantine any .vbs/.js/any executable that came through until I looked at it, but I was hoping for something a little more automated. Just a pipe dream? Any products of note out there you guys have experience with? Thanks, Matt Rogghe - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
