MailSecurity 8. (Security).

GFI MailSecurity for Exchange/SMTP 8, is an email content security product that uses multiple anti-virus engines, exploit detection, an HTML 

threats engine, and content and attachment checking to scan incoming and outgoing email for viruses, exploits and attacks. Version 8 includes many key features, the most significant of which is a new Trojan & Executable Scanner

GFIs Trojan & Executable Scanner can analyze what an executable does, and quarantines any executables that perform suspicious activities, such as Trojan files. Trojans are dangerous as they can enter a victim's computer undetected, granting an attacker unrestricted access to the data stored on that computer.

Comment: Unlike viruses, which tend to be widely disseminated, Trojans are often "one-oft" executables, targeted towards a specific user to obtain particular information. Because anti-virus software is signaturebased, it is unable to detect these custom-made Trojans. Indeed, any product that relies on signatures alone to detect malicious software cannot be effective in detecting such threats--even if it is a specialized anti-Trojan solution - because signature-based software can only detect known viruses and Trojans. However, this software cannot recognize or identify one-off Trojans, as these are not released in the wild and therefore their signatures remain unknown.

GFI MailSecurity takes a different approach by using built-in intelligence to rate an executable's risk level. It does this by disassembling the executable, detecting in real time what it might do, and comparing its actions to a database of malicious actions. This way, it can detect potentially dangerous, unknown or one-off Trojans before they enter the network. The solutions new features includes: Support for Exchange 2003 and Windows Server 2003 and a decompression engine that supports more than 75 compression formats while offering configurable handling of compressed file archives.

www.gfi.com