Email Viruses

[Silverbug]

I just got an email from a client who is complaining about the amount of viruses he's receiving in his email. I know the servers check for attachment viruses, but how come he keeps getting them? How often are the definitions updated? is there any list of the viruses that they check for? so we can make sure they are up to date?

[Vixen]

I *believe* it checks for certain file extensions but I may be wrong. However, I am pretty sure that it is not a self updating system, like Norton's, where it automatically updates each week with all the new virus variations that have been released the week before.

I am sure one of the boys can explain the entire thing better than I can.

[Silverbug]

Yeah i was under the impression thats what it was doing (auto updating). The viruses that were having trouble with are MyDoom, Netsky & Sober. I have the Quarantine logs from the client so i might send a tt with it attached.

Has anyone else experienced this at all? i know i havent, and have only had complaints from one client.

[Carly]

I haven't received any other complaints as of yet, but that of course doesn't mean that no one else is having the problem. I receive tons of them on my *non* Vortech email accounts, but haven't received any on my Vortech accounts, but they are newer & probably haven't had the address spread about as much.

Matt's got FreshClam installed which does download the latest updates. I don't know that they ever fixed the "restarting" that it was doing before. I believe it still restarts every so-often, which will allow a few viruses to slip through.

[Silverbug]

Yeah, tis sorted now, the client was complaining about the return email sent from the server notifying him that he sent a virus. Thanks for looking into it tho Carly.

Yep, Carly's got it on the dot.

1) Freshclam updates virus definitions every few hours..

2) If clamd crashes, it will start back up within a minute.

So, viruses can still slip through, but should be pretty rare. Sometimes the load on the machine may also increase, and if a large quantity of mail hits the server at once, it may bypass the virus scan, rather than lose the mail..

[cambodia]

for me i got update with norton everyday but i still got sasser virus look like norton update so late . . i'm going to execute it last few day but suddently i suspect and delete it