RE: SoBig.E Virus Problem

  • From: "Jack Spradling" <jack@xxxxxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 27 Jun 2003 10:05:43 -0500

Trend can open Zips RARs etc... To check the payload. 


-----Original Message-----
From: Jeffrey Robillard [mailto:jrobill@xxxxxxxxxxxxx] 
Sent: Friday, June 27, 2003 6:13 AM
To: [ExchangeList]

http://www.MSExchange.org/

etrust can block attachments by name as well, any extension you want to
put in it can block.

however, the sobig.e virus has their payload zipped up, and blocking all
zip files isn't an option in this case.   Etrust scans whats inside the
zip and renames the payload file so it cant be run (unless some idiot
renames it back of course).



-----Original Message-----
From: Stephen Hartley [mailto:support@xxxxxxxxxxxxxxxxx]
Sent: Thursday, June 26, 2003 6:26 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Problem


http://www.MSExchange.org/

That's all very well. What about the unknown ones? 
I use eScan from www.mwti.net and it blocks all .exe, .com, .bat, .pif,
.scr etc. In other words, anything that is likely to be a virus carrier!
I'd rather be safe than to ever have to clean up another virus!
It also has a great content manager, pop-up blocker, has e-mail
attachment control, e-mail content scanning, web page scanning +++.

Stephen Hartley
NetAbility
Brisbane

-----Original Message-----
From: Debie Allen [mailto:debie2000@xxxxxxxxx]
Sent: Friday, June 27, 2003 6:53 AM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Problem

http://www.MSExchange.org/

Using Symantec AntiVirus Corporate Edition, no problems
detecting/deleting all known viruses.

--- "Hermano JS. Queiroz"
<hjsqueiroz@xxxxxxxxxxxxxxxxxx> wrote:
> http://www.MSExchange.org/
> 
> I was using Norton until decide to use ScanMail 6.01 for Exchange 2000

> and it caught at least 8 viruses last night, so I'm really please with

> this one now, Norton Antivirus was giving to me a hard time with all 
> kind of viruses.
> but if will still wants to try to fix any machine you download using 
> this link, works for me before I moved to Trend Micro.
> 
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.e@xxxx
emoval.tool.html
> 
> Hermano Queiroz
> Coordinator of Network Services
> Phone:(270)789-5202
> FAX:  (270)789-5050
> Campbellsville University
> 1 University Drive - UPO 1298
> Campbellsville, KY USA 42718
> www.campbellsville.edu
> 
> 
> 
> -----Original Message-----
> From: Tim Lamberth
> [mailto:tlamberth@xxxxxxxxxxxxxxx]
> Sent: Thursday, June 26, 2003 4:27 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: SoBig.E Virus Problem
> 
> 
> http://www.MSExchange.org/
> 
> Anyone using NAV enterprise 8? Similar problem?
> 
> -----Original Message-----
> From: Jeffrey Robillard
> [mailto:jrobill@xxxxxxxxxxxxx]
> Sent: Thursday, June 26, 2003 3:22 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: SoBig.E Virus Problem
> 
> http://www.MSExchange.org/
> 
> I have Etrust 7.  That is correct, the lastest patch reports it but 
> can't cure it, so it renames it with an AVB extension.  I would expect

> their next update to be able to delete it.
> 
> -----Original Message-----
> From: Lloyd Williams
> [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Thursday, June 26, 2003 4:20 PM
> To: [ExchangeList]
> Subject: [exchangelist] SoBig.E Virus Problem
> 
> 
> http://www.MSExchange.org/
> 
> Hi I use CA Etrust on our exchange server. The problem I am having is 
> that E-trust is detecting the virus but only reporting it. Other 
> viruses it is deleting. Does any one else have this problem Lloyd
> 
> -----Original Message-----
> From: Jamie A. Byrnes
> [mailto:jabyrnes@xxxxxxxxxxxxxxxxx]
> Sent: Wednesday, June 25, 2003 11:52 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: backup exchange2000 failed
> 
> 
> http://www.MSExchange.org/
> 
> 
> This is a multi-part message in MIME format.
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List 
> as: jrobill@xxxxxxxxxxxxx To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List 
> as: tlamberth@xxxxxxxxxxxxxxx To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List 
> as: hjsqueiroz@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to

> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List 
> as: debie2000@xxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
exchlist@xxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
jack@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')




Other related posts: