Virus Scanning

Overview

All messages that passes through smtp.ufl.edu are scanned for viruses. Viruses that infect computers through email have become an epidemic. They cause countless hours of downtime in workplaces across the world, as well as waste enormous amounts of bandwidth. They backlog mail servers with floods of infection attempts.

Virus are detected and disabled to save our user community time, reduce the volume of email messages that the servers have to process, and protect the image of the University.

How it works

As an email is received by the mail server, either from another host or from an end-user, it is scanned for viruses. This happens by taking each part of the message and running the NAI Virus Scanner (McAffee) on it. If no virus is found the message is accepted and normal delivery takes place.

If a virus is found and it is not a self-replicating virus, the message is accepted and a warning is inserted informing the recipient that the email contains a known virus so they can take appropriate action. Also, the infected part of the email is modified to prevent automatic execution of the attachment, which could lead to further infection. This type of virus is called a category A virus.

If the virus is known to be self-replicating, refered to as category B virus, then the message is rejected immediately. Since category B viruses often include random documents from the infected host (many of which are confidential) they are not made harmless and delivered in order to protect the privacy of the infected user.

Category B Viruses

The following is a list of category B viruses with links to more information. (last updated on 8/29/2003):

Badtrans , BugBear , CIH , Dumaru , Hybris , Klez , Lovelorn , Magistr , Mimail , MyParty , SirCAM , Sobig , Swen , Yaha

More information

Questions or problems? Contact the CNS Support Desk at (352) 392-2061.