Sorry for having laughed.

Ed Crowley MCITP MCSE+I MCSE+M MCTS MVP
"There are seldom good technological solutions to behavioral problems."

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Albert
Duro
Sent: Monday, August 18, 2008 2:59 PM
To: Exchange Discussions
Subject: RE: virus

OK, I've figured out the confusion.  You were talking as a user about a
message that came into your own mailbox, and it raised your suspicion.
I was assuming that you were talking as an admin about infected messages
that had penetrated your email system, away from your immediate scrutiny.

So, no need to give you a bon voyage?  :)
  
--- Jean-Paul Natola <[EMAIL PROTECTED]>
wrote:

> Plus the fact I knew I had not purchased any airline tickets lately 
> lol-
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
>
[mailto:[EMAIL PROTECTED]
> On Behalf Of Albert
> Duro
> Sent: Monday, August 18, 2008 12:13 PM
> To: Exchange Discussions
> Subject: RE: virus
> 
> yes, but how did you know that the single zipped file was a threat?  
> You said that your AV failed you on this one so *something* must have 
> alerted you to it.
> 
> I was just asking what that something was.
> And the reason I asked was because I also have Symantec, and I wanted 
> some clue how to look for something that my AV had supposedly missed.
> 
> --- Jean-Paul Natola <[EMAIL PROTECTED]>
> wrote:
> 
> > Well -  a single zipped file-  named ticket.exe , not too hard to 
> > figure that one out- then I uploaded to virustotal.com and it was 
> > confirmed
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> >
>
[mailto:[EMAIL PROTECTED]
> > On Behalf Of Albert
> > Duro
> > Sent: Thursday, August 14, 2008 10:26 PM
> > To: Exchange Discussions
> > Subject: Re: virus
> > 
> > How did you detect it?
> > 
> > ----- Original Message -----
> > From: "Jean-Paul Natola"
> > <[EMAIL PROTECTED]>
> > To: "Exchange Discussions"
> > <[email protected]>
> > Sent: Thursday, August 14, 2008 1:03 PM
> > Subject: virus
> > 
> > 
> > Just a heads up
> > 
> > Ticket.exe which comes zipped as ticket. zip  was not detected by 
> > clamav or symantec
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > Jean-Paul
> > 
> > 
> >
>
_________________________________________________________________
> > List posting FAQ:      
> > http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/read/?forum=exchange
> > To subscribe:
> >
>
http://e-newsletters.internet.com/discussionlists.html/
> > To unsubscribe send a blank email to
> >
>
[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us
> > at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have
> been
> > contacted with.
> > 
> > 
> >
>
_________________________________________________________________
> > List posting FAQ:      
> > http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/read/?forum=exchange
> > To subscribe:
> >
>
http://e-newsletters.internet.com/discussionlists.html/
> > To unsubscribe send a blank email to
> >
>
[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us
> > at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have
> been
> > contacted with.
> > 
> > 
> >
>
_________________________________________________________________
> > List posting FAQ:      
> > http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/read/?forum=exchange
> > To subscribe:
> >
>
http://e-newsletters.internet.com/discussionlists.html/
> > To unsubscribe send a blank email to
> >
>
[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us
> > at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have
> been
> > contacted with.
> > 
> > 
> 
> 
>
_________________________________________________________________
> List posting FAQ:      
> http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
> http://intm-dl.sparklist.com/read/?forum=exchange
> To subscribe:
>
http://e-newsletters.internet.com/discussionlists.html/
> To unsubscribe send a blank email to
>
[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us
> at:
> Jupitermedia Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
> 
> Please include the email address which you have been contacted with.
> 
> 
>
_________________________________________________________________
> List posting FAQ:      
> http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
> http://intm-dl.sparklist.com/read/?forum=exchange
> To subscribe:
>
http://e-newsletters.internet.com/discussionlists.html/
> To unsubscribe send a blank email to
>
[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us
> at:
> Jupitermedia Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
> 
> Please include the email address which you have been contacted with.
> 
> 


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to