Jerry, > The only safe thing to do at that point is wipe the drive and start > over.
Absolutely, if you know it happened (IDSs are still not the norm)! Being able to freely pass viruses into an organization that thinks it's protected at the server level, with nothing to trace except for a Windows-standard Registry value, would be a very effective against many; of course, for those that mandate up-to-date desktop antivirus as well, it wouldn't be a big deal at all. To me, it's a unique flaw, since it basically allows an effective attack on the antivirus engine itself with only a script kiddy's level of code and no in-memory fingerprint. And people generally don't run the on-access scanner on the Imail directory, if they run it at all, so there's no backup protection if you do your original dirty work from there. Really, it should simply serve as a wake-up call (certainly inadvertent on F-Prot's part) to those that were trying to get awesome protection for the *absolute* rock bottom, who now have to pay a teensy bit more. > I've seen a couple of odd-ball problems. My take is if it's not a > VERY temp file intensive task, leave 8.3 on. Very true, but you don't get much more intensive than mail. That's why the whole thing concerned me in the first place. I also *had* to turn it on at certain unnnamed (now-defunct) site builders who are my clients--lots of simultaneous edits and creates took a similar toll. What apps have given you difficulties? I'd like to be able to look out for them. > Not really an issue. F-Prot never touches the LFN that imail sees. Yeah, you're right about all that. Sorry, I momentarily blacked out on the process flow. Too much coffee. Anyway, whatever. People are vulnerable at a million different levels, and probably we should be auditing our servers again instead of having this discussion. :))) Regards, Sandy Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
