Thu, Jan 25 2007 22:41
The storm worm possible impact
Larry Seltzer reported an issue on his SBS 2003 box with SBS's built in email attachment blocker...
An error occurred in the function OnArrival:DeleteUnsafeAttachments while running the Secure Attachments Tool (Secatts.dll) to remove SMTP e-mail attachments. The error code is: -2146644475. To fix the problem, run the Configure E-mail and Internet Connection Wizard, and clear the option to remove e-mail attachments; then run the wizard again and select the option.
Based on that (and I had to laugh as I forgot that I had put the KB link in eventid.net) it appears that the event can be ignored and Larry theorized that the error was SBS freaking out over dealing with the Storm Worm. I think he's right. But he might want to reregister these two dlls just to be safe...
regsvr32 /u secatts.dll
Years ago when I only relied on Trend to filter out viruses, I had a case where I got nailed with so many viruses in a short amount of time that an infected zip file got in ... the virus engine was so overwhelmed it was unable to handle it. Since then I evaluate what files I really need for business and block things we don't.
A thread in the SBS newsgroup discusses the possible reasons for the message...but things have been fun out here lately hasn't it?
Filed under: Security