Discussion Locked

W32Badtrans virus

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Since we have norton corporate version antivirus we were able to stop this virus from the server by configuring the exchange server to scan every e-mail that comes in and goes out. But what I do not understand is we are still being hit by about 100 Badtrans virus on daily basis and I have to delet them from the qurantine several times a day. Is there something wrong with server or is it happening to everyone. I will appreciate any input in this matter.

Thanks.

9 replies

by bigjedi20

Same thing here, except we use NAI Groupshield. Instead of quarentinnig, why not have it deleted upon inspection?

by bigjedi20

Same thing here, except we use NAI Groupshield. Instead of quarentinnig, why not have it deleted upon inspection?

by joseph moore

BadTrans is still floating around out there. It is still classified as a category 4 virus by Symantec.
People are still infected out there. Until they clean up, you are still gonna get it.
You could gather the addresses of the people sending it to your system, and notify them that they are infected.

by don christner

Your anti-virus is doing it's job. You wouldn't want it to delete an important file, so it quarentines it (some viruses can be cleaned from the file). You should look at who is sending you these infected emails and let them know. If they do not have up to date virus definitions, they will not have a clue that they are infecting you, the worm sends email without them knowing.

Don

This discussion is closed to new replies.