Latest Virus attackes

[A15]

I have been receiving those infected e-mails, on most of my users the outlook(2000) receives the infected e-mail but shows a message that the file attached was blocked, however on some of my users outlook the files go through...???

Is there anyway that I can block the file and the e-mails from the server??

I am running the NAV for exchange and NAV corporate client on the server.

 

[jcck2003]

I am using the same setting you have there, generally when people get that message, NAV already took action to delete or block the email, did you do a full system scan after that user has shown infected ?

 

[A15]

yup
the file has been deleted and the computer scan shows no infection.
I have NAV on my client computers too.
Is the virus being stoped by exchange NAV or client NAV??

 

[fitzgeraldjw]

You may want to save the contents below to a .REG file and run it on your exchange servers. It is used to block specific file extension types that may contain viruses. Suggest you first run REGEDT32 and connect to your exchange servers, then go to the registry key called HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\NAVMSE\2.1\BlockingPolicy\Attachment to determine if your company is blocking any file types. I strongly recommend you fully understand any registry edits prior to modify the registry on a server.

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\NAVMSE\2.1\BlockingPolicy\Attachment]
"UseRegularExpressions"=dword:00000000
"AttachmentNamesCount"=dword:00000016
"AllowsChecksWithinArchives"=dword:00000000
"AttachmentNames0"="*.vb*"
"AttachmentNames1"="*.e??"
"AttachmentNames2"="*.bat"
"AttachmentNames3"="*.cmd"
"AttachmentNames4"="*.ws*"
"AttachmentNames5"="*.shs"
"AttachmentNames6"="*.js"
"AttachmentNames7"="*.com"
"AttachmentNames8"="*.url"
"AttachmentNames9"="*.pif"
"AttachmentNames10"="*.lnk"
"AttachmentNames11"="*.scr"
"AttachmentNames12"="message.zip"
"AttachmentNames13"="application.zip"
"AttachmentNames14"="details.zip"
"AttachmentNames15"="document_9446.zip"
"AttachmentNames16"="document_all.zip"
"AttachmentNames17"="movie0045.zip"
"AttachmentNames18"="thank_you.zip"
"AttachmentNames19"="your_details.zip"
"AttachmentNames20"="your_document.zip"
"AttachmentNames21"="wicked_scr.zip"

Hope this helps

-jason