Results 1 to 3 of 3
  1. #1
    Untangler
    Join Date
    Dec 2007
    Posts
    47

    Default Virus Blocker Question

    Does the Virus Blocker only scan emails with attachments?

    I have McAfee on the Exchange server and it sometimes detects the virus "W32/Zhelatin.gen!eml" which looks to be something in the body of the email rather than a file attachment. Is this something that Virus Blocker should be detecting? The McAfee Groupshield details for this detection are:

    Detected Item detail
    Date/time 16 January 2008 08:51:02
    Subject Celebrate Your Independence
    Sender "e-cards.com" <wdirf@rennaker.net>
    Recipients Jon Smith
    Reason Anti-Virus
    Virus found W32/Zhelatin.gen!eml
    Quarantined item 1
    Result Replaced
    Scanned by OnAccess (VSAPI)
    Size 1 KB
    Detected file [Message Body]

    Thanks!
    Richard

  2. #2
    mdh
    mdh is offline
    Untangle Ninja mdh's Avatar
    Join Date
    Aug 2007
    Posts
    4,752

    Default

    Depending on settings, it should. You didn't mention whether that's incoming or outgoing. Addresses on spams/viruses usually being bogus, its good to check that, as well as the activity in spam blocker, paying attention to the direction and your settings for each direction. Also, while I can't make a blanket statement, it would be interesting to see how other Virus Blockers handle that message. Read into that what you want...

  3. #3
    Untangler
    Join Date
    Dec 2007
    Posts
    47

    Default

    If I send an email from a web account (ie an inbound email) I do not see it appear in the Virus Blocker Event Log, unless the email has an attachment. It does appear (as clean) in the Phish Blocker & Spam Blocker Event Log.

    So I guess my question should be, is there an app that checks for bad links within SMTP emails? (I don't think the Spyware Blocker checks SMTP for URLs).

    Thanks.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2