[VizioNy]

WORM_MYTOB.K within temp files. How does the BES server contract the virus? By processing emails from exchange? Our A/V has successfully deleted the infected files but it is a daily item.

Ran the notes from Trend to remove it but it doesn't seem the server is effected. Could not find the related processes. Any help?

[acnst]

Maybe it is caused by attachments your users are trying to view on the device. As far as I know the BES Attachment Service extracts attachments to the temp directory.

[VizioNy]

Should be concern about WORM_MYTOB.K virus appearing the temp directories all the time?

[knottyrope]

Should see a log entry that a file could not be acceessed on the BES.

Then might be able to narrow it down to a user/infected machine.

[VizioNy]

Thanks for the prompt reply, which log file is that?

[knottyrope]

Server logs and check the BES magt log