Virus causing SMTP service to restart

[achilleus]

Thanks in advance for any help you can offer.

Over the past several weeks, the Netsky virus has been causing the SMTP service on our Exchange 2003 box to stop and start. Over and over. When I look in the queue folder, I see all of the messages. I then scan the folder for viruses and find one or more netsky infected emails. Once I delete these emails, everything is fine.

Any idea how I can prevent this?? I am using McAfee products to protect the servers. I have also installed a patch from MS that was to prevent this from happening.

Thanks again!

AJ
SA
HS

 

[achilleus]

Also, as a side note, our GroupShield for Exchange does block the netsky virus. I see many sucessful blocks. But sometimes it seems to miss them. Or they never reach the GroupShield service and stay stuck in the queue.

Thanks again for any help.

AJ
SA
HS

 

[fs483]

Could the infected emails be generated internally from an infected workstation ? Does your McAfee scan only incoming emails or also outgoing and IS ?

 

[zoeythecat]

Have you tried running a Groupshield scan of your Mailboxes?

 

[achilleus]

Thank you very much for the help.

I have made sure that GroupShield is scanning incoming and outgoing emails properly. Seems to be.

One thing I haven't done is a manual scan of the entire store for infections. I'm running that now. I'll post the results.

Thanks again!

AJ
SA
HS