[THIN] Re: OT: Security response to BAGLE virus (password protected .zips)
- From: Glenn Dona <gdona@xxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Fri, 5 Mar 2004 09:55:30 -0500
We are blocking all the zip files that are coming and we instructed every
one to rename the extension so they can send it and the same with the
legitimate sender.
It's a pain but it works.
Glenn J. C. Dona
PC/Network Manager
Urban Outfitters, Inc
1809 Walnut St.
Philadelphia, PA 19103
Phone-215-972-4290
Fax-215-972-4292
-----Original Message-----
From: Jan Broucinek [mailto:tinybeetle@xxxxxxxx]
Sent: Friday, March 05, 2004 9:22 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: OT: Security response to BAGLE virus (password protected
.zips)
Mail Essentials and Mail Security from GFI scans the contents of zip
files for viruses. If it cannot scan it due to a password, it kicks it
back to the administrator as a password protected zip. The user never
gets it unless the admin then manually approves it. I'm getting a few
dozen a day of these.
----- Original Message -----
From: "Claus, Brian" <BClaus@xxxxxxxxxxxxx>
To: <thin@xxxxxxxxxxxxx>
Sent: Thursday, March 04, 2004 8:28 AM
Subject: [THIN] OT: Security response to BAGLE virus (password
protected .zips)
> Just wondering what others are doing to combat the latest BAGLE
worm. =
> It's password protected so standard AV won't scan into it. How is =
> everyone else handling delivery of .zip files now?
>
> We're using the Trend Micro AV suite.
>
> Do you think the latest password protected BAGLE worm has caused the
=
> demise of password protected .zip files?
>
> My immediate opinion in the matter is that password protected .zip
files =
> will now be treated with the same delivery restrictions that the
.exe, =
> .scr, .pif, .vbs have come under but I'm not aware of any AV
software or =
> other means to differentiate scanning options between p\w protected
.zip =
> files and non p\w protected .zip files.
>
>
> Thanks,
> =20
>
> _____ =20
>
> =20
> Brian Claus, A+, Network+, MCP
> Network Administrator
> WESCO Distribution, Inc.
> 225 West Station Square Drive, Suite 700
> Pittsburgh, PA 15219-1122
> Phone: 412-454-2412
> Fax: 412-454-2540
> bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>=20
> _____ =20
>
> ********************************************************
> This weeks sponsor triCerat Inc.
> triCerat makes your job easier by offering essential
> applications to eliminate your printing, policy and profile,
> and your application management problems.
> http://www.triCerat.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
DISCLAIMER: This message contains information which may be confidential
and/or privileged, and is intended only for the use of the addressee(s).
Any use, disclosure or copying of this message or any part thereof by any
person other than such addressee(s) is unauthorized and strictly prohibited.
If you have received this message in error, please notify the sender by
return e-mail and delete the message. Thank you for your cooperation.
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
