cant find e-mail with Sobig worm 1

[timoteo]

My Symantec Antivirus detected the sobig worm. For what ever reason it was not able to quarintine or delete the e-mail where it was located. I then tried to manually delete the file I could not find it. My virus scanner told me it was located in this folder C:\Program Files\Exchsrvr\Mailroot\vsi 1\Queue\ . However, when I opened that folder there are no files listed. Next I ran the SobigFix from symantec and it said that Sobig was not found on my server.

I am confused, is my antivirus program wrong, or do I have Sobig floating on my server?

If it is, I should be O.K. because I keep our server patched up, but I am still worried and confused.

Thanks in advance for any assistance.

Timoteo

 

[PeriyurParthi]

Please check out which anti-virus you are useing. if you are useing NAV for corporate edition check out in the symantec website to scan the files and folders of excange server.
bye
peiyur

 

[timoteo]

PeriyurParthi,

Thank you for the advice. I found some information on Symantec's website. It basically said that I should not be using Symantec Antivirus Corporate Edition to scan Exchange folders for viruses. Doing so can yield to false positives and could damage the exchange databases.

I am not sure what to do next. How can I stop e-mail worms if I cannot even scan the directories were e-mails are stored? And can a worm or virus that is stored in an Exchange folder infect other file on my server?

Thanks,

Timoteo

 

[mrlauri]

I too am running Norton Corporate V7. I too have had to exclude exchange folders. However, with my NAV V7 came a disk set that reads: For Gateways and Firewalls. If you also have that CD, on it you will find NAV for Exchange. Install that puppy, it works great.