Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Global inbox rule in exchange

Posted on 2000-05-05
7
318 Views
Last Modified: 2013-12-28
We have recently been hit by the loveletter virus. To stop this reoccuring I want to set up this global inbox rule in exchange to stop us recieving .vbs extension files. Is there anyway to do this globally as I cant go into everyones account and do this manually (too big a task and the network is currently down)

Thanks in advance
0
Comment
Question by:SCIEH2
7 Comments
 
LVL 12

Accepted Solution

by:
pjknibbs earned 100 total points
ID: 2780296
Why don't you get a proper virus checking program? Fiddling Exchange to stop files with the VBS extension getting through would prevent another occurrence of this one infection, but virus writers are crafty devils and you'd have to completely block all attachments to be even mostly safe. This won't always help--no virus checker program knew about Love Letter yesterday, for instance--but it's considerably more reliable than just hoping you can block infected attachments just by their extension.
0
 

Author Comment

by:SCIEH2
ID: 2780381
Ok then so you dont know, anyone else?
0
 
LVL 12

Expert Comment

by:pjknibbs
ID: 2780764
The reason I posted the comment I did is because I *know* what you're asking is extremely difficult--you'd need to write an Exchange plug-in to do the job. Virtually everything in Exchange is held on a per-mailbox basis, which makes global chopping and changing like this tricky without major coding.
0
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

 
LVL 23

Expert Comment

by:Tim Holman
ID: 2780819
You need a third party app to filter out files with specific extensions - ie messagesweeper, mimesweeper, groupshield exchange etc..
To delete *.VBS files en masse, you'd need access to take ownership of each user's mailbox and delete them manually !
There is a love letter virus fix out now - can you not apply this to your Antivirus systems and be done with it ?
0
 
LVL 55

Expert Comment

by:andyalder
ID: 2782231
I deleted vscript.exe and cscript.exe from all clients as my checker was fooled by the name.vbs.txt style extenson name, string filtering is no use as anyone can edit the containing email and signature filtering won't keep up with the simplicity of editing the script. WSH goes pants up unless it can be stopped from autoexecutes without prompting.

Mimesweeper with 6 plugin checkers (some listed above) did not kill this one but quick unplugging of the firewall stopped us from replicating it across the web.
0
 

Expert Comment

by:joebanana
ID: 2787264
ah---I know this doesn't answer the question but you need Norton Antivirus for exchange asap.....stopping VBS extensions is hardly the cure-all.  We stopped the virus through automated norton updates...
0
 

Author Comment

by:SCIEH2
ID: 2788590
ok, first of all sorry to piknibbs for the curt response as I was extremely agitated by that time as you could imagine. I did indeed install the virus check update when we recieved it. I have recently put on an excellent package called email essentials from GFI.com. This stops all sorts of files globally, you can decide what extensions, types of keywords to exclude spamming etc. I now Know exchange has no built in feature and the points go to piknibbs for pointing that out. (and a bit of humble pie)

Thanks everyone, We have now recovered from this mess.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question