Solved

McAfee VirusScan software blocking SMTP mails from being sent

Posted on 2008-06-23
15
2,203 Views
Last Modified: 2013-11-30
I have created a webpage in VB and want to send mails using SMTP. That all works fine, except that the virus scan is set up to block mails. If you open up the VirusScan console and click 'Access Protection' and then unclick the check box 'Prevent Mass Mailing worms from sending mail' on the server then the website can send mails without any problem. Unfortunately, the VirusScan software resets itself every hour or so and rechecks this checkbox and when this happens the site can no longer send mails again.

I posted this question under another zone and was told that you can circumvent this process by adding the process to the excluded processes list. So, the only problem is I have no idea what process you should add to this list so that my website can send SMTP mails. I did try a few processes suggested by other people experiencing the same problem (like w3wp.exe) but they didn't seem to work. What process should be added?

Also, I spoke with another person who had this setting fixed on their server (although they don't know how it was done - the IT dept did it some how but who did it I don't know). He says that they have the 'Prevent Mass Mailing worms from sending mail' checkbox permenently unchecked which suggests that the excluded processes list was not the way they did this, but they reconfigured the computer somehow.

Any ideas?

Thanks, Aiden
0
Comment
Question by:AidenA
  • 9
  • 4
  • 2
15 Comments
 
LVL 13

Expert Comment

by:mrroonie
ID: 21845056
have you tried adding iexplore.exe to the list of exlusions in the 'prevent mass mailing....'?
0
 

Author Comment

by:AidenA
ID: 21845248
Hi,

I tried that but it didn't work unfortunately.

0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21845886
Under Virus Scan console > Access Protection Properties goto Antivirus Std. Protection and there you'll find mcafee blocking mass emails. You can simply allow it there or from edit just add the name of your application's executable name.

See the attached image to know what I am talking about.
Untitled.jpg
Untitled.jpg
0
 

Author Comment

by:AidenA
ID: 21846186
Hi, yes, I am familiar with the setup (although my version looks a bit different - see attached).

But the problem is not changing the setting, I can simply uncheck the checkbox in the access protextion properties section called 'prevent mass mailing worms from sending mail' and my webpage can send mail. The problem is that the McAfee software resets this check box back to it's original setting every hour or so which means I can only send mails for an hour until the virus scan software starts blocking the mails again.

And secondly, I'm still not sure what process I need to exclude from the 'excluded processes list'. I have set up a website which is hosted by IIS on this computer... what process needs to be excluded? Is it IIS or some file that my website uses? I've no idea actually.

But still, I don't believe this is the way to go, because I have changed all the settings in the 'Add or edit a port blocking range' dialog box and I see that everything is reset every hour. So, even if I add a new process to the 'excluded processes list' that process seems to get removed every hour also as the whole McAfee Virus Scan resets itself to it's original settings.

So, I believe some other configuration is required? Any ideas?

Thanks, Aiden
Access-Protection-Properties.jpg
Add-or-edit-a-port-blocking-rang.jpg
0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21846298
Does it works fine when you disable "Prevent Mass Emailing from Web Forms" option?
0
 

Author Comment

by:AidenA
ID: 21846328
Yeah, that works fine. Just keeps resetting.
0
 

Author Comment

by:AidenA
ID: 21848001
So obviously I need to find a way of stopping McAfee from resetting the values back to their original values. I'm sure there's a way to do this, do you have an idea?

Thanks, Aiden
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 10

Expert Comment

by:RubalJ
ID: 21848025
McAfee never keeps resetting settings for me .. you have something odd with your machine.
0
 

Author Comment

by:AidenA
ID: 21853643
No it's not the machine... same with all the machines here. McAfee resets itself to it's original settings. So, is there anyone who might be able to answer this question do you think? I know there's a solution because the IT dept here solved it before... except that I don't know who solved it so I can't ask!
0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21853758
Why dont you try upgrading to 8.5.0i?
0
 

Author Comment

by:AidenA
ID: 21853910
Well it's a company machine so I don't think they'd go for that. But also, as far as I'm aware there is a solution to this so I think my only option is to try and find out how to solve it?
0
 

Author Comment

by:AidenA
ID: 21854509
I've figured out what process to exclude by looking at the reports tab. The process to exclude is aspnet_wp.exe

So, that's interesting but still doesn't solve the problem. If I add this to the excluded processes list, it will simply be removed when the settings reset themselves.

Anyone?
0
 
LVL 13

Expert Comment

by:mrroonie
ID: 21854886
have you tried reinstalling mcafee?
0
 

Author Comment

by:AidenA
ID: 21854963
but what would that do? it is the same issue on all computers. I've looked at 3 different computers, but I was actually told this would happen by someone else before I became aware of it myself, so this is supposed to happen, I just need to try and find a way to stop it happening.
0
 

Accepted Solution

by:
AidenA earned 0 total points
ID: 21873006
Ok well I think I have the solution anyway.

Here's what someone else had to say on the subject:

"The only thing that reverts Virusscan settings back is an epo agent. Your administrator maybe running ePO which enforces Mcafee policies and may be overwriting the changes you make. You have to change the policy on the server or de-install the agent"

So, I'll let you know if this is the problem...
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Many of us here at EE write code. Many of us write exceptional code; just as many of us write exception-prone code. As we all should know, exceptions are a mechanism for handling errors which are typically out of our control. From database errors, t…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now