[THIN] Re: Heads up - InoculateIT sig 23.60 and ICA client

  • From: Andrew Grubb <andrew@xxxxxxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Wed, 19 Feb 2003 11:20:07 -0500

I really hate CA... Is it me, or does anyone else feel it's like russian
roulette everytime you get a new Sig from them?

-----Original Message-----
From: John Price [mailto:JPrice@xxxxxxxx] 
Sent: Wednesday, February 19, 2003 11:15 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Heads up - InoculateIT sig 23.60 and ICA client



Changed it to Vet for real-time, didn't catch anything. Changed back to
InoculateIT for real-time, caught the Worm, whether it be bogus or not.

John

>>> andrew@xxxxxxxxxxxxxxx 02/19/03 10:09AM >>>

I would be curious to see what happens in your case using the Vet engine for
Real Time Scanning.


-----Original Message-----
From: John Price [mailto:JPrice@xxxxxxxx] 
Sent: Wednesday, February 19, 2003 11:04 AM
To: thin@xxxxxxxxxxxxx 
Subject: [THIN] Re: Heads up - InoculateIT sig 23.60 and ICA client



More info: Full system scan didn't find anything. When I re-installed the
ICA client (6.31.1051), the real-time scanner caught the virus. This was on
a "clean" system. I've replicated it on 4 computers now. For some reason,
during the install of the ICA client, it detects that Worm in wfcrun32.exe.
This is from a fresh install on a clean system. This also happened with the
6.30 client.



>>> andrew@xxxxxxxxxxxxxxx 02/19/03 09:54AM >>>

I'm working with a customer right now running InoculateIT 6.0.101 (sp1) with
InocIT sig 23.60 and Vet 10.57.4439. We're using Vet for Real Time scanning
and InocIT for scheduled jobs..  I ran a shell scan of the Citrix directory
on this machine here and came up with no problems...   


*********************************************************
This Week's Sponsor - Neoware 
Now through March 31, 2003 
Neoware is offering a Capio 500/Eon Proven 2100 
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html 
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm 
*********************************************************
This Week's Sponsor - Neoware 
Now through March 31, 2003 
Neoware is offering a Capio 500/Eon Proven 2100 
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html 
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm 

*********************************************************
This Week's Sponsor - Neoware 
Now through March 31, 2003 
Neoware is offering a Capio 500/Eon Proven 2100 
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
*********************************************************
This Week's Sponsor - Neoware 
Now through March 31, 2003 
Neoware is offering a Capio 500/Eon Proven 2100 
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: