Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Repeating virus detection

Status
Not open for further replies.

mmendes

IS-IT--Management
Jun 20, 2002
149
US
I have the following entry in my application log exactly every 5 minutes:

HTML/PhishBank.Cbank!Trojan virus was detected in D:\PROGRAM FILES\EXCHSRVR\MAILROOT\VSI 1\QUEUE\NTFS_08221FFC01C511D0000001E3.EML. Machine: Server1, User: System. File Status: Infected

I am running Etrust6 on Windows 2000/Exchange 2000 server. OS, antivirus, and Exchange are all fully patched. When checking the mail queues and SMTP logs during a test period, their shows no activity at all in or out of the mail server. The queues are all empty. As best as I can tell, their are no NDR's are any other mail being processed by the server. Still, Etrust detects this and logs the entry every 5 minutes to the exact second.

Any help would be appreciated.

Thank you.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top