Exchange Server Forums

Virus Strategy question for you experts out there

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Virus Strategy question for you experts out there

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Virus Strategy question for you experts out there - 24.Feb.2006 5:33:53 PM

wkirschner

Posts: 2
Joined: 24.Feb.2006
Status: offline

We are having a problem at our organization in that some one or thing has gotten ahold of a couple peoples e-mail address and is sending up to 5 virus e-mails per day.

We have perimiter gateway scanning through our ISP and we have trend software on our exchange server, but since this virus is so sneaky, I can't block the sender because it is different every time.

This one has progressed to the point where I have suggested changing the reciepients e-mail address because it is mainly coming through to just the 2 addresses.

I am afraid otherwise that one will somehow sneak through and it will not be a pretty sight.

Do you have any other ideas I am not thinking of? Obviously, changing ones e-mail address ruins the naming convention, and is an extreme inconvenience to the user who has to notify everyone of the change.

your responses will be greatly appreciated.

_____________________________

Thanks!
Bill

Post #: 1

Featured Links*

RE: Virus Strategy question for you experts out there - 25.Feb.2006 12:09:11 PM

Henrik Walther

Posts: 6849
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline

Doesn't the Trend product allow you to block inbound messages with specific words or phrases in the subject or body fields?

_____________________________

HTH
Henrik Walther
Exchange MVP | MCM: Exchange 2007
MCITP: EMA, MCITP: EA, MCSE: M+S

Order my Exchange Server 2007 Book!

(in reply to wkirschner)

Post #: 2

RE: Virus Strategy question for you experts out there - 27.Feb.2006 2:45:41 PM

wkirschner

Posts: 2
Joined: 24.Feb.2006
Status: offline

Yes it does, but I have not found any consistency in the messages. Here is an example of what I am speaking of:

Today, I received 4 notifications of viruses found:

one the infected file was called information.zip, one notification.zip, whmfh.zip, and instructions.zip. the reciepient is the same, but most everything else varies so you cant really make rules. I am thinking the last resort is to change the reciepients e-mail address, but due to naming conventions, I wanted to see if anyone else had any ideas.

Thanks so much for responding to my e-mail

Bill

_____________________________

Thanks!
Bill

(in reply to Henrik Walther)

Post #: 3