Welcome to Day 24 of the SANS ISC's participation in the Cyber Security Awareness Month. Today's topic is what you have to do when you have a virus or other such malware attack sat in your e-mail queue, or already on your clients as you did not get AV coverage soon enough.

Today of all days is the ideal time to discuss this issue. WIth MS08-067 being at the front of everyones workload at the moment, what are your plans to clean your e-mail systems should the current batch of malware get through your edge defences?

If you have any tricks or tips on how to overcome this issue, or do you just purge your queues and take the hit, let me know via the contact form and I'll update the diary through the day.