McAfee Caused Exchange Mail Store Unmount?
"The file \Device\HarddiskVolume11\EXTL2\MDBDATA\E01.log\E01.log\image4.jpeg contains the Exploit-QtPICT Trojan. Undetermined clean error,OAS denied access and contiued. Detected using Scan engine version 8400.1158 DAT version 6288.0000"
Hopefully someone can explaint and guide m ont his.Any suggestions on what to do/where to go?
Re: McAfee Caused Exchange Mail Store Unmount?
Did configure the VSE Exchange Exclusions???
I reckon it must be the different path that causes Virusscan to not match exclusion against the file path it receives from the operating system. Your exclusion could be someting like \Exchsrv\(something)\*.* and this is not matching against \Device\Harddisk\etc.
I actually put the exclusion for my L: drive and \Device\Harddisk\etc actually one of my folder within L drive. What is surprising VSE still scanning within my L drive. I already checked log file %VSEDEFLOGDIR% however couldn't any prove that state scanning was perform. However on the Virus Scan show event scanning files within L drive.
Very very strange..Please advice me on this.
There is VirusScan Profiler 1.1 to see which files are most scanned. It enables making statistics on top X file scanned. However I'm not sure how big a value you can enter in the filtering field to see deep enough, and thus you may not see whether that particular file is being scanned or not that you are interested in. Nevertheless you can download it from McAfee portal it may come handy later on.
LogFileFormat : REG_DWORD : 0 = ANSI, 1=UTF8, 2=UTF16.
Stop/Restart McShield service to make changes.
When you experience the issue, open OnAccessScanLog.txt file and see if the files that you wanted to exclude were being scanned actually (with their actualy path that may or may not matches path used in your exclusion).
Revert the registry changes back to where they were previously once you are ready with testing.