W32.Yaha.F@mm

[ElijahBaley]

Hi

It seems that my Exchange Server is under attack from the following Virus W32.Yaha.F@mm and is planting or attempting to plant infected files with names such as 40P75H76 in EXCHSRVR\IMCDATA\IN

Our antivirus software is detecting them and placing them in quarantine, but I want to understand how they are getting onto the server in the first place?

This server is of course a mail server and sends and receives internet mail - apart from the default system shares there are no other shared foldwers on this computer, so are these viruses arriving by email and trying to infect the mail server ??

Thanks for your help,

EB

 

[KingofSketch]

Take a look at this URL, It should give you all the info you need

http://vil.nai.com/vil/content/v_99528.htm

Sketch
"Eagles may soar, but weasels don't get sucked into jet engines"