I just spent the day removing the latest "Windows email virus-de-jour infection” (Badtrans) off of several client systems. A few weeks ago I "enjoyed" cleaning up a Nimda infection that had reduced a network of 25 PCs to sludge. I'm really tired of this kind of job security.

So far, I've tried Norton, Trend, and McAfee on the workstations. The problem is that the end users forget to update their virus definition files and I don’t want to baby-sit 100 PCs. A colleague I spoke with today said that his Win2k servers were running firewall virus scanners from Norton and that it caught all of the Badtrans infection-events today. Bottom line, he spent a few minutes scanning log files and reading reports while I spent hours editing Win.ini, the Windows Registry, and booting to DOS on each machine to delete the trojans.

All of my clients are running RedHat Linux 6.x or 7.x on all file, internet, and mail servers…no Windows servers for me as long as I can help it!

Cut to the chase: I want to completely eliminate workstation virus scanning software and install SOMETHING on the Linux servers to filter this garbage out.

What? Anyone have experience in this area? Any recommendations? (Some of the stuff from Kaspersky Labs looks promising.)

Thanks in advance for any feedback or advice.

Mike Copeland
Genesis Group Software