View Full Version : Hallmark email with bogus postcard.zip getting through
The zip file contains an exe for I believe TR/Dropper. For some reason UT passes it through as clean.
I have antivir turned on as well as spam and spyware. My exchange inboxes are now full of this darn thing.
What specific part, if any, of UT would normally block this? Antivir correct?
avolve
11-15-2008, 11:36 AM
Antivir ? I hope you mean AntivirUS and at the very least Clamd, cause there is a worthless piece of pain called Antivir. On your reports for the Virus Scanning Rack turned on, see what the date/time of the latest updates are.
dmorris
11-15-2008, 12:39 PM
are you running virus blocker, kaspersky virus blocker, or both?
Sorry I wasn't more clear, I have the UT Spyware Blocker, Spam Blocker, Virus Blocker and Web Filter running.
Virus Def: Fri Nov 14 23:05:47 2008
pass message (SMTP) You've received A Hallmark E-Card!
Lots of the above message in the log for Antivirus
I'm pretty sure the virus/malware in question has been around for months.
It would appear, according to the Antivirus blocked event log that Antivirus hasn't blocked anything since yesterday morning. I'm sure it should have as I have 1200 email boxes on my Exchange server.
... just a bit more info after looking closer - something must be goofy, the DNSBL hasn't blocked anything since Oct 23rd
Catul
11-18-2008, 11:17 AM
Try rebooting the Untangle server; I had a similar problem (http://forums.untangle.com/showthread.php?t=5720).