I really hate CA... Is it me, or does anyone else feel it's like russian roulette everytime you get a new Sig from them? -----Original Message----- From: John Price [mailto:JPrice@xxxxxxxx] Sent: Wednesday, February 19, 2003 11:15 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Heads up - InoculateIT sig 23.60 and ICA client Changed it to Vet for real-time, didn't catch anything. Changed back to InoculateIT for real-time, caught the Worm, whether it be bogus or not. John >>> andrew@xxxxxxxxxxxxxxx 02/19/03 10:09AM >>> I would be curious to see what happens in your case using the Vet engine for Real Time Scanning. -----Original Message----- From: John Price [mailto:JPrice@xxxxxxxx] Sent: Wednesday, February 19, 2003 11:04 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Heads up - InoculateIT sig 23.60 and ICA client More info: Full system scan didn't find anything. When I re-installed the ICA client (6.31.1051), the real-time scanner caught the virus. This was on a "clean" system. I've replicated it on 4 computers now. For some reason, during the install of the ICA client, it detects that Worm in wfcrun32.exe. This is from a fresh install on a clean system. This also happened with the 6.30 client. >>> andrew@xxxxxxxxxxxxxxx 02/19/03 09:54AM >>> I'm working with a customer right now running InoculateIT 6.0.101 (sp1) with InocIT sig 23.60 and Vet 10.57.4439. We're using Vet for Real Time scanning and InocIT for scheduled jobs.. I ran a shell scan of the Citrix directory on this machine here and came up with no problems... ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm