I would recommend trend anti-virus software. http//www.trend.com The software is centrally controlled by TVCS. This central management allows software auto updates every hour to all trend products. That's 800 PC's, 5 Exchange servers, 30 NT servers. Most importantly it does crash NT servers and it remote installs with out the need for a reboot. So far a 250 inbound emails infected with AnnaKournikova.jpg.vbs have been cleaned at the Internet Email gateway. Richard Taylor Network Administrator Thomson Legal & Regulatory Group. [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -----Original Message----- From: Todd Barlow [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 14 February 2001 6:25 To: 'Matt Rogghe'; '[EMAIL PROTECTED]' Subject: RE: Matt, I must say that our Trend Micro Exchange-aware virus scanner (Scanmail, I believe) detected the virus sent to this list yesterday. I dare say that not a one of these viruses made it through to our Internal network, but I do know that if it did miss it coming in, when it does a full scan on the mailbox it will catch it. -----Original Message----- From: Matt Rogghe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 13, 2001 08:44 AM To: '[EMAIL PROTECTED]' Subject: RE: Just an interesting note here and maybe a request for feedback. I first found the virus yesterday after I got back from lunch and had something like 10-15 e-mails from the users here in my office... all the virus. Four users here had opened the attachment before I could stop them. Since I had just, minutes before, received those e-mails, I ran to the server and yanked the connection between the firewall and the mail server.... deleted all outbound e-mails from the exchange server queue (users will at least get a non-delivery if it was genuine business).... cleaned off the PC's and then re-connected the server. Now, I work in a small office (~25 users) so I can do this sort of thing with impunity where some of you guys in bigger installations probably can't, but my real question here is: are there any good Exchange virus/content scan agents out there? I took a look at a few a short while back and again yesterday and was discouraged to note that not a single one would identify the Kournikova virus unless you had updated the software with a patch released sometime yesterday.... probably a little too late. I suppose I could purchase one of these and simply quarantine any .vbs/.js/any executable that came through until I looked at it, but I was hoping for something a little more automated. Just a pipe dream? Any products of note out there you guys have experience with? Thanks, Matt Rogghe - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
===================================================================== WARNING -This e-mail, including any attachments, is for the personal use of the recipient(s) only. Republication and re-dissemination, including posting to news groups or web pages, is strictly prohibited without the express prior consent of Thomson Legal & Regulatory Group Asia Pacific Ltd ACN 058 914 668 =====================================================================
