-
Título
What is the procedure and the effect of deleting virus infected files from the attachment store? -
Descrição
If offline antivirus scanning on the attachment store reveals virus infected files, is there a procedure to delete the infected files and what would the effect be for end users?
-
Resolução
Infected files in the store can be deleted. However the attachments will no longer be accessible in the messages. A red shield will be displayed in the message when it is opened in the Archive Manager Web UI, meaning that the link to the attachment is broken and the message will not be automatically reconstituted in Outlook.
To display a message when a deleted attachment is accessed, create a .TXT file with a message such as "Attachment was infected with a virus and has been deleted".
Replace the virus infected file with the .TXT file, renaming it with the exact same name and extension as the file deleted by AntiVirus.Also to identify the mailbox the infected file was linked to you follow these stepsIf the infected file is the followingC:\Quest\ArchiveManager\Data\000\000\000\001\1270.pngTo find the mailbox this file is linked to you can run the following script just replace 111 with the attachment ID from the file name which is 1270 in this case./****** Script to find mailbox from attachment number ******/Use ArchiveManagerSELECT Name FROM mailboxWHERE mailboxid IN(SELECT mailboxid FROM mailboxmessageWHERE messageid IN(SELECT MessageID FROM attachment WHERE attachmentfileid='111')) -
Informações adicionais
N/A