Antivirus Problems

[eastwood]

Still got messages that slip through the net using ME Pro and F-Prot

had a shed load of emails get through the checker with the virus of W32.Netsky.b@mm

Lucky for me Norton picked them up my end BUT I had customers who werent so lucky.....

What can i do to make sure ME is picking things up, how do these get through, why does it not pick up all? I have run the debug and its fine it stops some but not all?

Cheers

[Guest]

[quote="eastwood"]Still got messages that slip through the net using ME Pro and F-Prot

Here also with me-pro and Norman antivirus, does not look good !!!!

[MailEnable-Ben]

Hi, we have created a fix for the issue you have mentioned here please find it below it is a replacement setting for your registry.

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVFPI]
"Exit Codes"="3 8"

CHeers,
Ben.

[Guest]

I have been getting the exact same problems, except we are using Sophos AntiVirus...

Will this fix work for us??

Thanks

- Carl S

[AlertServ]

How about Panda Command Line Scanner and ME Pro?

[christophw]

Is this fixed for 1.16 or do we have to apply this registry fix to 1.16 servers too?

Chris

[quote="Support-Ben"]Hi, we have created a fix for the issue you have mentioned here please find it below it is a replacement setting for your registry.

[code]Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVFPI]
"Exit Codes"="3 8"[/code]

CHeers,
Ben.[/quote]

[woldhekkie]

Sometimes virus slips through, also get a message in the mta debug log :

Error!-Could not delete Inbound Message ( Boys, look into this !!!!)

It looks like sometimes antivirus did find a virus , gave a return code to mta , but mta and/or antivirus was unable to delete the file in the smtp queue.

Every day the smtp queue fills up with files. The ammount of files is exact the same as the errors i get in the mta debug log.

It look like sometimes the files get locked to long. (or mta is to fast)

Running 2003 server on 2x 3ghz proc. 1.5 gh mem. Use Norman antivirus with changed registrysettings (wich support return code) and Fprot 6.0
Also use snimta (works perfect)

If support can`t get antivirus to work , I will give up on Mail Enable.
(spend too much time in it......)

[nathand]

I checked a 1.16 installation and it was correct by default, so it looks fixed for 1.16.

Is this fixed for 1.16 or do we have to apply this registry fix to 1.16 servers too?

Chris

Hi, we have created a fix for the issue you have mentioned here please find it below it is a replacement setting for your registry.

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters\MEAVFPI]
"Exit Codes"="3 8"

CHeers,
Ben.

[techcall]

Here is what I'm seeing when using PAVCL....

We are able to successfully stop the EICAR.zip.

However, when in zip format, Netsky and Bagel seem to slide through (AV Sig file is up to the minute).

When I tested the return code settings Ben provided for FProt, it kills all attachments.

So, for PAVCL, let me ask the question a different way...

What are the correct switch and registry settings?

Is anyone getting PAVCL to successfully stop Netsky and Bagel in zip format?

[techcall]

UPDATE:

I thought I had the latest build installed but I was mistaken (downloading is not enough, you must actually not get distracted and complete the install - DOH!). Upon completing the install, everything works exactly as it should.