F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 6.62 -, Administrator'S Manual

Page: 385 / 397

CHAPTER D 385
Troubleshooting
Quarantined and Disinfected Files
Q. When examining a raw message that has been disinfected, there
seems to be some data that should be stripped. Is the message
still infected?
A. Disinfected messages do not contain any malicious code. The
Microsoft Exchange server keeps the original message header in the
message, so MIME-part headers may appear in the raw message
data.
Q. A message has an Attachment_Information.txt file as an
embedded OLE object. What is this file and why do I get a
warning message when I try to open the file?
A. The original message had an infection which F-Secure Anti-Virus for
Microsoft Exchange removed and replaced with the
Attachment_Information.txt file. As embedded OLE objects have to
be replaced with text attachments to avoid corrupting OLE objects,
the
Attachment_Information.txt is an embedded OLE object that
causes the warning message. The VirusInfo text file contains
information about the infection that has been removed.
The Attachment_Information.txt file may appear also in Public Folder
messages for the same reason.
Q. During the installation, I get a notification that an application is
requesting access to a protected system. What causes this?
A. You are using Windows 2000 Certificate Service and this behavior is
normal with it.
Q. What happens to e-mails saved in the Drafts folder during the
real-time scanning?
A. Messages saved temporarily into the Drafts folder are considered to
be inbound and they are scanned and stripped accordingly.