We have McAfee Enterprise 8.5.0i. It blocked an email attachment on Exchange 2007.
I remember that for Exchange 2003 I could use registry twiks. But they don't work on 2007.
Is there any ways to unblock the email on Exchange 2007?
Thanks tlange. But I got a message:
PACKER DETECTION ALERT
The anti-virus scanner has detected a packer program. The file was not cleaned and has been removed.
Detection(s): 'WinzipSFX (compressed file)'
How can I add this exclusion?
and the most important
Do you know by chance how to recover that attachment on Exchange 2007?
Groupshield detected this file, not virusscan.
KB66431 tells how to add an exclusion for a packer in the groupshield gui
the name you will add is WinzipSFX
does groupshield have the action of quarantine for packer detections. if so then the attachment should be located in the detected items section of the groupshield gui
to find out the action groupshield took look under policy manager\on access\master policy\anti-virus scanner \ actions to take
default behavior is to replace and quarantine
Thanks tlange! The problem was solved.
I added that exclusion.
I found groupshield on one of our mailbox servers. extracted that attachment from an email in Quarantine folder with groupshield gui.