This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM Email Protection is missing Macro Virus detection

Hi all,

It looks like the old Macro Viruses are making a rapid comeback and over the last few months our customers have been bombarded by these emails with .doc attachments - They say that in the IT world the old will become new again if it's left long enough and it seems this is the case.  Macro viruses have probably been removed for detection by most antiviruses these days so they're making a big comeback.  Does Sophos plan to implement detection of these?

Cheers, Mike



This thread was automatically locked due to age.
Parents
  • Mike, it might be time to have upper management remind folks that they should never click on a link or a document that they weren't expecting. Your post would seem like a good starting point for his missive to the troops. If you have good AV on each endpoint, trying to save a suspicious file to your device usually reveals if it is malware.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Mike, it might be time to have upper management remind folks that they should never click on a link or a document that they weren't expecting. Your post would seem like a good starting point for his missive to the troops. If you have good AV on each endpoint, trying to save a suspicious file to your device usually reveals if it is malware.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Couldn't agree more there Bob,

    We run a small ISP and constantly send out reminder emails to customers saying beware of opening attachments, but unfortunately the older generation that are less computer literate still seem to open them up.

    I just ran a scan on one of the DOC files using virustotal.com and it only had a hit rate of 3/54 which is pretty poor - I run Avira pro on my workstation here. www.virustotal.com/.../

    Cheers, Mike