I need your help in finding out How to remove emails containing a virus from our Mail Server. We have a virus protection software that alert us to viruses that hit our server, but if a new one hits and it is not detected and it send the email to all of our users. I want to remove the contaminated email from all the mailboxes without going into the users mailbox. Is there a way this can be done?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Virus on Exchange Server
- Thread starter Evette
- Start date
You didn't say what virus protection you are using but it doesn't sound like a good one.
We are using McAfee Groupshield on our Exchange 5.5 box. It's set so all infected e-mails are quarantined into a quarantine database. We also quarantine most attachments that can be mischievious. We could scan them but we're trying to discourage joke files, etc. because of space limitations.
The server is set to check daily for virus definition updates. So far so good, nothing has ever gotten through to the users from Exchange.
We are using McAfee Groupshield on our Exchange 5.5 box. It's set so all infected e-mails are quarantined into a quarantine database. We also quarantine most attachments that can be mischievious. We could scan them but we're trying to discourage joke files, etc. because of space limitations.
The server is set to check daily for virus definition updates. So far so good, nothing has ever gotten through to the users from Exchange.
- Thread starter
- #3
We are using Network Associates Group Sheild for the Exchange Server5.5. The virus that hit us was the SoBig virus. See the following page on the virus. I will talk to my network administrator to see if our server check daily for definition updates. Thanks for the info. I assume that there is no way of deleting the virus without going into the mailboxes themselves.
If you're using GroupShield (as with the others), you can run an On-Demand scan on the Exchange server. This will scan the mailboxes on the server and try to clean viruses stored there.
HTH, AVChap
... my $1 worth of advise, 2cents isn't enough due to inflation
HTH, AVChap
... my $1 worth of advise, 2cents isn't enough due to inflation
HI.
The best way is to run a scan with the AV product as AVChap wrote.
If for some reason this does not work for you (which I doubt), there are utilities for Exchange that can scan and deal with messages which have a specific subject line etc.
I think that one of them is called MBSCAN but I'm not sure.
Also the real time AV scanner (once updated) should catch the infected messages when the users or brick level backup proccess tries to access them.
Bye
Yizhar Hurwitz
The best way is to run a scan with the AV product as AVChap wrote.
If for some reason this does not work for you (which I doubt), there are utilities for Exchange that can scan and deal with messages which have a specific subject line etc.
I think that one of them is called MBSCAN but I'm not sure.
Also the real time AV scanner (once updated) should catch the infected messages when the users or brick level backup proccess tries to access them.
Bye
Yizhar Hurwitz
Go to and download a trial version of Antigen.
You wont find a better antivirus product for Exchange.
You wont find a better antivirus product for Exchange.
- Status
Similar threads
