Open one up and see....:)) S ________________________________ From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Friday, April 15, 2005 8:43 PM To: ISA Mailing List Subject: RE: [isalist] RE: FW: [MailServer Notification]To Sender file blocking settings matched and action taken. I had some unknown attachments come in last night in .rar format. I submitted them to Symantec for analysis, wonder if it is the same one? ________________________________ From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Fri 4/15/2005 5:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW: [MailServer Notification]To Sender file blocking settings matched and action taken. http://www.ISAserver.org To all, please note: There is a new fast spreading virus apparently out within the last 2 hours. It is forging the from address (as normal) and a lot of systems are bouncing back to that forged from address. John T eServices For You The haggis is unusual in that it is neither consistently nocturnal nor diurnal, but instead is active at dawn and dusk (crepuscular), with occasional forays forth during the day and night.