cancel
Showing results for 
Search instead for 
Did you mean: 
Pit345
Level 7
Report Inappropriate Content
Message 1 of 5

McAfee 8.5 blocks Exchange 2007 an email attachment

Hello,

We have McAfee Enterprise 8.5.0i. It blocked an email attachment on Exchange 2007.

I remember that for Exchange 2003 I could use registry twiks. But they don't work on 2007.

Is there any ways to unblock the email on Exchange 2007?

Thanks.

4 Replies
McAfee Employee tlange
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: McAfee 8.5 blocks Exchange 2007 an email attachment

you would need to make sure the proper exchange file/folder exclusions are present in vse.  here is a kb that goes over that info.

KB51471

Pit345
Level 7
Report Inappropriate Content
Message 3 of 5

Re: McAfee 8.5 blocks Exchange 2007 an email attachment

Thanks tlange. But I got a message:

PACKER DETECTION ALERT

The anti-virus scanner has detected a packer  program. The file was not cleaned and has been removed.
Context: 'Query.abc' 
Detection(s): 'WinzipSFX (compressed file)'

How can I add this exclusion?

and the most important

Do you know by chance how to recover that attachment on Exchange 2007?

Thanks

http://www.mcafee.com/

Highlighted
McAfee Employee tlange
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: McAfee 8.5 blocks Exchange 2007 an email attachment

Groupshield detected this file, not virusscan.

KB66431 tells how to add an exclusion for a packer in the groupshield gui

the name you will add is WinzipSFX

does groupshield have the action of quarantine for packer detections.  if so then the attachment should be located in the detected items section of the groupshield gui

to find out the action groupshield took look under policy manager\on access\master policy\anti-virus scanner \ actions to take

default behavior is to replace and quarantine

Pit345
Level 7
Report Inappropriate Content
Message 5 of 5

Re: McAfee 8.5 blocks Exchange 2007 an email attachment

Thanks tlange! The problem was solved.

I added that exclusion.

I found groupshield on one of our mailbox servers. extracted that attachment from an email in Quarantine folder with groupshield gui.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.