Virus

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Virus

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI MailSecurity >> Virus

Page: [1]

Message

<< Older Topic Newer Topic >>

Virus - 30.Nov.2007 11:12:15 AM

Adilson

Posts: 41
Status: offline

I am receiving emails with the virus with anti-virus enabled. Sample virus is with attachments. "Pif,. Zip,. Exe,. Scr." The rules for this type of file should block, but not blocks. I await a possible solution.

Post #: 1

RE: Virus - 30.Nov.2007 12:00:06 PM

sandro

Posts: 1345
Joined: 26.Jul.2007
Status: offline

Hello Adilson,

Where is MailSecurity installed? Is it on Exchange or on a gateway machine?

Are you able to see these emails passing through the realtime monitor within MailSecurity?

How did you confirm that the attachments that are passing actually contain a virus?

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to Adilson)

Post #: 2

RE: Virus - 30.Nov.2007 2:55:04 PM

Adilson

Posts: 41
Status: offline

So I am using Gateway. Yes, it is through the monitor of GFI. (30/11/2007 09:08:19-Processing new item
30/11/2007 09:08:19 - Sender: vivian_dsm@hotmail.com
30/11/2007 09:08:19 - Subject: Re: Re: Delicia!
30/11/2007 09:08:19 - Recipients: I@mycompany.com.br;
30/11/2007 09:08:19-Processing new item). The email is already known as viruses, but to confirm sent to my personal email and even GFI blocked as a virus (W32/Netsky.CW). What could be happening?

(in reply to sandro)

Post #: 3

RE: Virus - 3.Dec.2007 1:20:40 PM

sandro

Posts: 1345
Joined: 26.Jul.2007
Status: offline

Hello Adilson,

In Decompression Engine, did you enable the option to 'Scan Within Archives (Attachment Checking)' ?

If the virus is zipped it will not get detected till it passes through the decompression engine.

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to Adilson)

Post #: 4

RE: Virus - 6.Dec.2007 9:47:17 AM

Adilson

Posts: 41
Status: offline

Yes, this enabled.

(in reply to sandro)

Post #: 5

RE: Virus - 7.Dec.2007 8:10:07 AM

sandro

Posts: 1345
Joined: 26.Jul.2007
Status: offline

Hello Adilson,

This issue is currently being handled by e-mail support. The reference number(s) used are:

CAS-43576 - Adilson

NOTE: We have sent you an email on the address that you have registered over the forums with.
Should you require any updates or further information, kindly contact us using the support form at the following link:
http://support.gfi.com/supportrequestform.asp

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to Adilson)

Post #: 6