We just got hit with the document.zip virus
We are using Exchange 2013 On-Premise fully up-to-date
We are using System Center 2012r2 fully up-to-date with Forefront Antivirus.
So far FEP is doing a pretty good job of capturing it but of course it just keeps coming back again and again.
We are re-imaging computers as fast as we can but losing ground.
I have asked management to let me block ZIP files but of course that's not going to happen. Is there a way to search, find and delete anything that fits this description in Exchange? I know I could do it in 2010 but new to 2013.
Thank you.