Author Topic: AVAST for Exchange 2003  (Read 9599 times)

0 Members and 1 Guest are viewing this topic.

medozero

  • Guest
AVAST for Exchange 2003
« on: January 09, 2011, 06:45:34 PM »
Hi
i wonder why avast AV detect one worm and AVAST Exchange 2003 plug in didn't detect it when i attach it to one email.
i used also Eicar Test Virus to test this and also the AV on my PC detect it but when i attached to Email  ( disabled my av first ) the exchange didn't detect it and the Email received with the virus inside

all configuration is to high

Any ideas?
 
« Last Edit: January 10, 2011, 03:51:50 PM by medozero »

medozero

  • Guest
Re: AVAST for Exchange 2003
« Reply #1 on: January 10, 2011, 08:05:35 PM »
No Answers ??!!

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: AVAST for Exchange 2003
« Reply #2 on: January 10, 2011, 08:13:07 PM »
The plugin is enabled on your exchange server, right?

I think the reason that the exchange plugin didn't find it when you attached the virus to an email is because you hadn't yet sent the email through exchange.  Since it was just sitting on the client side, the local scanner picked it up.

As for the eicar test virus, I can only think that the plugin isn't enabled or loading correctly on your exchange server.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

medozero

  • Guest
Re: AVAST for Exchange 2003
« Reply #3 on: January 11, 2011, 08:39:19 PM »
Hi
thanks for reply
i am using outlook to connect to exchange and sending the MSG using outlook
and PoC about what i am saying is i already send another MSG using same outlook and attach a very known virus and hola avast detect it
my configuration as i said is high with default
so what do you think?


Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: AVAST for Exchange 2003
« Reply #4 on: January 12, 2011, 04:13:42 PM »
I'm not quite sure at this point.  I don't have exchange configured at the location that I'm at today (since there's no Avast version that supports exchange 2010 yet, wink wink), but I have a 2003 exchange server that I can send the eicar test file through tomorrow.  I'll test it out for you then.

If mine works, I can only assume that there's something wrong with your installation.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

medozero

  • Guest
Re: AVAST for Exchange 2003
« Reply #5 on: January 12, 2011, 04:26:55 PM »
thanks man
i will wait for that

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: AVAST for Exchange 2003
« Reply #6 on: January 12, 2011, 05:43:41 PM »
I tried it remotely today.  It's damned hard to get a virus through to anything!

Gmail blocks it, Outlook web access blocks it, On-Access scanners blocks it...

I have no idea how I'm actually going to get it to exchange without something interfering before it gets there.  Which might be your problem.  Depending on the type of attachment and other factors, it might just be dropped before it ever gets to your exchange server.

I guess I'll remote into my test machine at work, try the .com eicar file, and attempt to send it to my personal email through exchange.  That's the only way I can think that I'd be able to get it through exchange.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: AVAST for Exchange 2003
« Reply #7 on: January 12, 2011, 05:54:04 PM »
Alright, I remotely accessed my work machine at my other location.

I downloaded the .com eicar file after completely disabling Avast on that machine.

I removed the .com extension, and attached it to an email.

I sent the file to my personal email address from my exchange account.

The results?  I never got the email.  ADNM console didn't report anything was found, but the file never made it out of my exchange server.

I re-enabled Avast on the desktop, and tried to save the file from the email (from my sent items) and was able to save it to my desktop.  I right-clicked and scanned the file, and avast alerted on it.

All I can say, is that it works for me.  I don't know where to look in the logs to find out if it was removed, moved to the chest, or whatever, but I don't really care.  As long as it doesn't leave my network, I'm happy.

So, what happens if you do that?
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

medozero

  • Guest
Re: AVAST for Exchange 2003
« Reply #8 on: January 14, 2011, 01:02:43 PM »
hi
  well in your case you didnot get the mail and also AVAST in The Exchnage didnot report any . then this weird.. For me the email come to me with the attached . and my avast on Desktop alert me when i tryed to save  the file

hope you test again .. or we will never know

By the way did you try any other virus to see if avast on exchange will detect it

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: AVAST for Exchange 2003
« Reply #9 on: January 19, 2011, 05:41:23 AM »
Honestly, I didn't check my exchange server's logs, nor did I check the avast log on the exchange server either.  I figured that I would see something from the ADNM console, but I didn't.

Again, the email just seemed to drop off the face of the earth.  While that may be slightly undesirable, it's better than letting it go through and infecting others.

Also, I didn't test with any other viruses. Luckily we don't get many with the amount of layered security that I use on my networks.  In fact, the only ones that I could even try testing with would be False positives (unless you know of a nice big depository of viruses that I can peruse at my leisure?).

If I get a chance, I'll test again or just look more closely at my server's logs to see exactly what it did with the email.

Something obviously picked it up and prevented it from being sent.  I can only assume it was the Exchange plugin.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Joy1982

  • Guest
Re: AVAST for Exchange 2003
« Reply #10 on: January 23, 2011, 06:36:38 AM »







Suggest Me Which to Download...........
« Last Edit: January 23, 2011, 06:40:35 AM by Joy1982 »

wpn

  • Guest
Re: AVAST for Exchange 2003
« Reply #11 on: January 23, 2011, 11:45:19 AM »
well

we will not participate in supplying you illegal versions (coming from your screenshot with the keygen in it)....

but if you are willing to download and BUY a LEGAL version, you have to get it from
http://www.avast.com/security-software-business