RE: SoBig.E Virus Problem

  • From: "Jeffrey Robillard" <jrobill@xxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 27 Jun 2003 07:12:32 -0400

etrust can block attachments by name as well, any extension you want to put in 
it can block.

however, the sobig.e virus has their payload zipped up, and blocking all zip 
files isn't an option in this case.   Etrust scans whats inside the zip and 
renames the payload file so it cant be run (unless some idiot renames it back 
of course).



-----Original Message-----
From: Stephen Hartley [mailto:support@xxxxxxxxxxxxxxxxx]
Sent: Thursday, June 26, 2003 6:26 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Problem


http://www.MSExchange.org/

That's all very well. What about the unknown ones? 
I use eScan from www.mwti.net and it blocks all .exe, .com, .bat, .pif,
.scr etc. In other words, anything that is likely to be a virus carrier!
I'd rather be safe than to ever have to clean up another virus!
It also has a great content manager, pop-up blocker, has e-mail
attachment control, e-mail content scanning, web page scanning +++.

Stephen Hartley
NetAbility
Brisbane

-----Original Message-----
From: Debie Allen [mailto:debie2000@xxxxxxxxx] 
Sent: Friday, June 27, 2003 6:53 AM
To: [ExchangeList]
Subject: [exchangelist] RE: SoBig.E Virus Problem

http://www.MSExchange.org/

Using Symantec AntiVirus Corporate Edition, no
problems detecting/deleting all known viruses.

--- "Hermano JS. Queiroz"
<hjsqueiroz@xxxxxxxxxxxxxxxxxx> wrote:
> http://www.MSExchange.org/
> 
> I was using Norton until decide to use ScanMail 6.01
> for Exchange 2000 and it caught at least 8 viruses
> last night, so I'm really please with this one now,
> Norton Antivirus was giving to me a hard time with
> all kind of viruses.
> but if will still wants to try to fix any machine
> you download using this link, works for me before I
> moved to Trend Micro.
> 
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.e@xxxx
emoval.tool.html
> 
> Hermano Queiroz
> Coordinator of Network Services
> Phone:(270)789-5202
> FAX:  (270)789-5050
> Campbellsville University
> 1 University Drive - UPO 1298
> Campbellsville, KY USA 42718
> www.campbellsville.edu
> 
> 
> 
> -----Original Message-----
> From: Tim Lamberth
> [mailto:tlamberth@xxxxxxxxxxxxxxx]
> Sent: Thursday, June 26, 2003 4:27 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: SoBig.E Virus Problem
> 
> 
> http://www.MSExchange.org/
> 
> Anyone using NAV enterprise 8? Similar problem?
> 
> -----Original Message-----
> From: Jeffrey Robillard
> [mailto:jrobill@xxxxxxxxxxxxx] 
> Sent: Thursday, June 26, 2003 3:22 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: SoBig.E Virus Problem
> 
> http://www.MSExchange.org/
> 
> I have Etrust 7.  That is correct, the lastest patch
> reports it but can't cure it, so it renames it with
> an AVB extension.  I would expect their next update
> to be able to delete it.
> 
> -----Original Message-----
> From: Lloyd Williams
> [mailto:Williams@xxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Thursday, June 26, 2003 4:20 PM
> To: [ExchangeList]
> Subject: [exchangelist] SoBig.E Virus Problem
> 
> 
> http://www.MSExchange.org/
> 
> Hi I use CA Etrust on our exchange server. The
> problem I am having is that
> E-trust is detecting the virus but only reporting
> it. Other viruses it is
> deleting. Does any one else have this problem
> Lloyd
> 
> -----Original Message-----
> From: Jamie A. Byrnes
> [mailto:jabyrnes@xxxxxxxxxxxxxxxxx]
> Sent: Wednesday, June 25, 2003 11:52 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: backup exchange2000
> failed
> 
> 
> http://www.MSExchange.org/
> 
> 
> This is a multi-part message in MIME format.
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org
> Discussion List as: jrobill@xxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org
> Discussion List as: tlamberth@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org
> Discussion List as: hjsqueiroz@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
>
------------------------------------------------------
> List Archives:
>
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ:
>
http://www.msexchange.org/pages/larticle.asp?type=FAQ
>
------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory:
> http://www.serverfiles.com
> No.1 ISA Server Resource Site:
> http://www.isaserver.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
>
------------------------------------------------------
> You are currently subscribed to this MSExchange.org
> Discussion List as: debie2000@xxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
exchlist@xxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: