Virus policy
- Which attachments can I send and receive?
- What is done when a virus is detected?
- What is done when a file is blocked?
- Which warnings can I receive?
- What is Heuristic?
1. Which attachments can I send and receive?
Allowed file types
| File Type | Description |
|---|---|
| *.doc | Microsoft Word document |
| *.xls | Microsoft Excel document |
| *.pps | Microsoft PowerPoint document |
| *.ppt | Microsoft PowerPoint document |
| Adobe Acrobat File | |
| *.gif | Graphic file type |
| *.jpg | Graphic file type |
| *.png | Graphic file type |
| *.txt | Plain text file type |
| *.zip | Compressed document |
| *.uti | Encrypted document |
All other file types are blocked, due to security reasons.
Multiple filename extensions
If an e-mail with an attachment named with multiple filename extensions was received,
the e-mail will be seen as a new virus. Even if the file type is allowed (see table
above).
For example: if you want to e-mail a Word document named 'agenda 24.02.04.doc' your
e-mail recipients will receive a heuristic scan alert message.
The only solution is to rename your document (for instance: 'agenda 24_02_04.doc')
How to send other file types
If you need to attach a file type not in the list above, the easiest way to mail your document is by zipping it.
2. What is done when a virus is detected?
When the anti-virus software on the e-mail server detects a virus, the e-mail
message will be deleted.
No notification will be sent.
Until now, when a virus was detected, the virus was removed from the mail but the
mail itself was sent to the recipient. By deleting the entire mail, we want to reduce
the e-mails sent due to viruses.
3. What is done when a file is blocked?
When the anti-virus software on the e-mail server detects a non-allowed file
type, the attachment will be blocked. A notification will be sent to the
recipient(s) of the mail.
When you receive such a warning, please contact the person who send the mail and
ask him to zip the attachment.
4. Which warnings can I receive?
4.1 Replaced blocked file
Warning
One or more attachments have been removed
from this message because they have an unsafe file type.
Context: 'name_file'
Ticket number: 'ticket_number'
If you need the attachment, open an Altiris call and mention the ticket number listed above.
See also the FAQ file Virus Policy - which
attachments can I send and receive.
4.2 Heuristic Scan alert
Warning
Subject: MCAFEE E-MAIL SCAN ALERT!~
Attachment file : name_file
Scanner Detected: Heuristic - (Could be a new virus)
Action taken : Unable to Clean...
Attachment file : name_file
Scanner Detected: Heuristic - (Could be a new virus)
Secondary Action taken : Moved...
Solution
If you are sure the attachment is save, you can find the mail in your quarantine folder of your mailbox.
5. What is 'Heuristic'?
Heuristic scan technology enables VirusScan software to recognize new viruses
based on their resemblance to similar viruses the software already knows. To do
this, the software looks for "virus-like" characteristics in the files you have
asked it to scan. The presence of a sufficient number of these characteristics in
a file leads the software to identify the file as potentially infected with a new
or previously unidentified virus.
Because the software looks simultaneously for file characteristics that rule out
the possibility of virus infection, it will rarely give you a false indication of
a virus infection. Therefore, unless you know that the file does not contain a virus,
you should treat "potential" infections with the same caution you would confirmed
infections.
In case of a problem do not hesitate to contact the helpdesk at +32 92 10 97 24.
Author: DVSM\rafnou
| Modified by: DVSM\wimpou,
Tuesday October 13, 2009 17:26:09 +0200