Exchange Server Virus????
I came in this morning and was checking out my Exchange server. I went into C:\Documents and Settings, and noticed a new "user" profile/folder that was 8-10 strange characters including Chinese characters and squares and whatnot. Server seems to be runnign fine, but I deleted that folder real quick. Do you think that machine has a virus, and if so, I have Symantec CE installed, can I run a scan on that server? I'm pretty sure to run a scan I have to exclude all kinds of folders first, right? Thanks.
Sorry - and the best practices for deployment guide - again from symantec
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002090915484448?Open&src=bar_sch_nam&docid=2002090916040948&nsf=ent-security.nsf&view=9d94c8571a91ba4788256bf3007f62b5&dtype=&prod=&ver=&osv=&osv_lvl=
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002090915484448?Open&src=bar_sch_nam&docid=2002090916040948&nsf=ent-security.nsf&view=9d94c8571a91ba4788256bf3007f62b5&dtype=&prod=&ver=&osv=&osv_lvl=
ASKER
Scanning right now with all the relevant folders/files excluded. Let me ask you a question..I just want to get this straight.....
If a user gets an email that contains a virus, and for some reason it get's through the virus scanner, and for some reason the user clicks on the
attachment and gets the virus, that virus is on the USERS pc, bot the server, right? How would my Exchange server get a virus if no one logs into it but me,
it's not a file server, just a very simple Exchange server, and there's no mail clients even installed on it......I just want to clear that up...Thanks.
If a user gets an email that contains a virus, and for some reason it get's through the virus scanner, and for some reason the user clicks on the
attachment and gets the virus, that virus is on the USERS pc, bot the server, right? How would my Exchange server get a virus if no one logs into it but me,
it's not a file server, just a very simple Exchange server, and there's no mail clients even installed on it......I just want to clear that up...Thanks.
ASKER
Scan came up clean.......Hmmmm.....Any ideas?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Beaten to it : Drat ;) - I think there's your answer to the problem!
ASKER
AAahhhhh....Thanks. I REEEAALLLY didn't want to spend all weekend at work dealing with a virus. Thanks again.
My pleasure.
I'm not sure what your problem was, but in relation to protecting exchange server, scanning etc with Symantec AV CE see below
Article from Symantec on Virus Protecting An Exchange server - scanning exclusions etc.
http://service1.symantec.com/SUPPORT/ent-security.nsf/9d94c8571a91ba4788256bf3007f62b5/8b773850a36516fe88256c2f007e436d?OpenDocument&src=bar_sch_nam
Deb