DoIT Help Desk Knowledgebase : DoIT Email Virus Protection

DoIT Email Virus Protection

Posted: 2001-10-02 12:43:39   Expiration: 2001-10-02 12:43:39

In order to reduce the spread of viruses propagated by email, DoIT has installed virus protection appliances in front of the several campus email systems including the email machines handling the @facstaff.wisc.edu and @students.wisc.edu domains.

In order to reduce the spread of viruses propagated by email, DoIT has installed virus protection appliances in front of the several campus email systems including the email machines handling the @facstaff.wisc.edu and @students.wisc.edu domains.

The anti-virus appliances scan and remove found viruses from most inbound email. This type of virus protection is a complementary solution and not a replacement for anti-virus software installed on faculty, staff and student computers.

If the appliances find a virus within an email, two actions will be taken for the recipient of the email:

1. An email alert will be sent to the recipient of the virus. This alert will include the name of the virus, the sender email address and the action taken.
   
   From: Administrator@av2.doit.wisc.edu
   Subject: Virus Alert
   
   This is an automated message please do not reply. The VIRUS_NAME virus was detected in email from SENDER_EMAIL_ADDRESS (DATE_TIME). The action taken: DELETED_OR_CLEANED_AND_ATTACHMENT_NAME. For more information, you can view the DoIT Help Desk web page at http://helpdesk.doit.wisc.edu/page.php?id=281
   
   
2. The original email from the sender will be forwarded to the recipient with either the email attachment cleaned (virus removed from the attachment) or the email attachment deleted (if the virus cannot be removed).

In general, the recipient of the virus email does not need to take further action. In many reported cases, the recipient of the virus email may not know the sender of the email.

Due to the fact that many virus emails are sent from non-existent and inaccurate email addresses, the virus protection appliances do not send an alert to the sender email address (From: address).

Anti-virus software vendors use a variety of naming schemes for known viruses. In order to look up information on a specific virus that you may have received, you can search for the VIRUS_NAME (included in the Virus Alert email above) at the following web site:

http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/

If you have additional questions, please contact the DoIT help desk at 264-help or help@doit.wisc.edu.

-- BadgIRT