W32.Swen slamming Exchange (Full Version)

All Forums >> [Microsoft Exchange 2000] >> Server Security



Message


Dreddnet -> W32.Swen slamming Exchange (22.Oct.2003 4:04:00 PM)

Within the last week my Exchange2k server has been slammed with Swen viruses. I have Symantec Antivirus with Exchange protection on there, but my inbox is still getting full of virus warnings that have been blocked. I keep getting emails about a new update from Microsoft or an Admin sending me an email titled Advice. Also is a pack of failure notices from sites I never sent to.

I checked all PC's on my network and none have the virus on them. Also ran the removal tool from Symantec and it said clean. What can I do to stop this from flooding my exchange and my inbox?

Any help would be greatly appreciated!

-D




Henrik Walther -> RE: W32.Swen slamming Exchange (22.Oct.2003 4:53:00 PM)

Checkout Vamsoft's script:

http://www.vamsoft.com/orf/tools.asp#swen

This is an SMTP transport event sink script developed specifically to filter Win32.Swen.A@mm worm emails. Emails that seems to be infected by the worm are dropped.




Dreddnet -> RE: W32.Swen slamming Exchange (23.Oct.2003 4:16:00 AM)

So far so good using that script.

How many good emails do you think this will block though? I have MailEssentials now to prevent many spam items and such from getting thru and those that are blocked get forwarded to a special account that I review.

Thanks for the tip!




Henrik Walther -> RE: W32.Swen slamming Exchange (23.Oct.2003 12:21:00 PM)

I have no idea, would suggest you ask this question in the Vamsoft newsgroups - news.vamsoft.com.




Page: [1]