I recently installed the new AV for Exchange from Symantec on my new E2K server and set up the rules to delete certain extensions (first mistake right there) I ran the background scan and the AV started deleting the java script attachments from the System Mailbox for Outlook Web Access…Here’s an example: (65 of these were deleted)
Location of the message: SystemMailbox{5E703984-BB77-4725-8F03-BCD04E5B9AF9}/NON_IPM_SUBTREE/schema-root/microsoft/exchangeV1/exchweb/controls
Sender of the message: SystemMailbox{5E703984-BB77-4725-8F03-BCD04E5B9AF9}
Subject of the message: readnote.js
The attachment “readnote.js” was Deleted.
This was done due to the following Symantec AVF settings:
Policy: Standard
SubPolicy: Property SubPolicy
Rule: Attachment Name Rule
Needless to say I freaked out and stopped the scan but it was too late. I called Symantec and they said they have heard of this happening before (Thank God I wasn’t the only schmoe) and that it was for Outlook Web Access and to re-install Service Pack3. Now when I did a search for these files on my Exchange Server they were still located under the folder exchsrv\exchweb\controls and have the date of Service Pack 3 installed.
The backup was finelast night, e-mails can go out and come in and I restarted the IS once to make sure I didn’t corrupt the database. My question is what the heck did I do to the system mailbox? And is there anything I should be concerned about or anything you thinkmight become an issue down the road?
Thanks in Advance Gang.