Solved

McAfee VirusScan software blocking SMTP mails from being sent

Posted on 2008-06-23
15
2,263 Views
Last Modified: 2013-11-30
I have created a webpage in VB and want to send mails using SMTP. That all works fine, except that the virus scan is set up to block mails. If you open up the VirusScan console and click 'Access Protection' and then unclick the check box 'Prevent Mass Mailing worms from sending mail' on the server then the website can send mails without any problem. Unfortunately, the VirusScan software resets itself every hour or so and rechecks this checkbox and when this happens the site can no longer send mails again.

I posted this question under another zone and was told that you can circumvent this process by adding the process to the excluded processes list. So, the only problem is I have no idea what process you should add to this list so that my website can send SMTP mails. I did try a few processes suggested by other people experiencing the same problem (like w3wp.exe) but they didn't seem to work. What process should be added?

Also, I spoke with another person who had this setting fixed on their server (although they don't know how it was done - the IT dept did it some how but who did it I don't know). He says that they have the 'Prevent Mass Mailing worms from sending mail' checkbox permenently unchecked which suggests that the excluded processes list was not the way they did this, but they reconfigured the computer somehow.

Any ideas?

Thanks, Aiden
0
Comment
Question by:AidenA
  • 9
  • 4
  • 2
15 Comments
 
LVL 13

Expert Comment

by:mrroonie
ID: 21845056
have you tried adding iexplore.exe to the list of exlusions in the 'prevent mass mailing....'?
0
 

Author Comment

by:AidenA
ID: 21845248
Hi,

I tried that but it didn't work unfortunately.

0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21845886
Under Virus Scan console > Access Protection Properties goto Antivirus Std. Protection and there you'll find mcafee blocking mass emails. You can simply allow it there or from edit just add the name of your application's executable name.

See the attached image to know what I am talking about.
Untitled.jpg
Untitled.jpg
0
Master Your Team's Linux and Cloud Stack

Come see why top tech companies like Mailchimp and Media Temple use Linux Academy to build their employee training programs.

 

Author Comment

by:AidenA
ID: 21846186
Hi, yes, I am familiar with the setup (although my version looks a bit different - see attached).

But the problem is not changing the setting, I can simply uncheck the checkbox in the access protextion properties section called 'prevent mass mailing worms from sending mail' and my webpage can send mail. The problem is that the McAfee software resets this check box back to it's original setting every hour or so which means I can only send mails for an hour until the virus scan software starts blocking the mails again.

And secondly, I'm still not sure what process I need to exclude from the 'excluded processes list'. I have set up a website which is hosted by IIS on this computer... what process needs to be excluded? Is it IIS or some file that my website uses? I've no idea actually.

But still, I don't believe this is the way to go, because I have changed all the settings in the 'Add or edit a port blocking range' dialog box and I see that everything is reset every hour. So, even if I add a new process to the 'excluded processes list' that process seems to get removed every hour also as the whole McAfee Virus Scan resets itself to it's original settings.

So, I believe some other configuration is required? Any ideas?

Thanks, Aiden
Access-Protection-Properties.jpg
Add-or-edit-a-port-blocking-rang.jpg
0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21846298
Does it works fine when you disable "Prevent Mass Emailing from Web Forms" option?
0
 

Author Comment

by:AidenA
ID: 21846328
Yeah, that works fine. Just keeps resetting.
0
 

Author Comment

by:AidenA
ID: 21848001
So obviously I need to find a way of stopping McAfee from resetting the values back to their original values. I'm sure there's a way to do this, do you have an idea?

Thanks, Aiden
0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21848025
McAfee never keeps resetting settings for me .. you have something odd with your machine.
0
 

Author Comment

by:AidenA
ID: 21853643
No it's not the machine... same with all the machines here. McAfee resets itself to it's original settings. So, is there anyone who might be able to answer this question do you think? I know there's a solution because the IT dept here solved it before... except that I don't know who solved it so I can't ask!
0
 
LVL 10

Expert Comment

by:RubalJ
ID: 21853758
Why dont you try upgrading to 8.5.0i?
0
 

Author Comment

by:AidenA
ID: 21853910
Well it's a company machine so I don't think they'd go for that. But also, as far as I'm aware there is a solution to this so I think my only option is to try and find out how to solve it?
0
 

Author Comment

by:AidenA
ID: 21854509
I've figured out what process to exclude by looking at the reports tab. The process to exclude is aspnet_wp.exe

So, that's interesting but still doesn't solve the problem. If I add this to the excluded processes list, it will simply be removed when the settings reset themselves.

Anyone?
0
 
LVL 13

Expert Comment

by:mrroonie
ID: 21854886
have you tried reinstalling mcafee?
0
 

Author Comment

by:AidenA
ID: 21854963
but what would that do? it is the same issue on all computers. I've looked at 3 different computers, but I was actually told this would happen by someone else before I became aware of it myself, so this is supposed to happen, I just need to try and find a way to stop it happening.
0
 

Accepted Solution

by:
AidenA earned 0 total points
ID: 21873006
Ok well I think I have the solution anyway.

Here's what someone else had to say on the subject:

"The only thing that reverts Virusscan settings back is an epo agent. Your administrator maybe running ePO which enforces Mcafee policies and may be overwriting the changes you make. You have to change the policy on the server or de-install the agent"

So, I'll let you know if this is the problem...
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A long time ago (May 2011), I have written an article showing you how to create a DLL using Visual Studio 2005 to be hosted in SQL Server 2005. That was valid at that time and it is still valid if you are still using these versions. You can still re…
Pop culture is prime bait for hackers seeking to infect user’s computers and mobile devices with malicious malware. Hackers know exactly what the latest trends are online and know how to use them to their advantage.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question