You would probably have the same problem with Scanmail - use Antigen scans before it hits the information store -
-----Original Message----- From: Edwards, Aaron [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 6:18 PM To: Exchange Discussions Subject: RE: New Virus outbreak The weird thing is that we are blocking .scr files but after a certain point of being hammered, NAV for exchange just couldn't keep up and users started opening it and we now have 5000 hi emails all over the place. About ready to throw in the towel and start using Scanmail. Aaron -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 2:48 PM To: Exchange Discussions Subject: RE: New Virus outbreak Behold, the beauty of multiple scan engines :) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -K.Borndale Network Administrator Sybari Software 631.630.8569 -direct dial 631.439.0689 -fax http://www.sybari.com "One man's ceiling is another man's floor" |--------+-----------------------------------> | | Martin Blackstone | | | <MBlackstone@superioracce| | | ss.com> | | | Sent by: | | | bounce-exchange-148870@ls| | | .swynk.com | | | | | | | | | 12/04/2001 05:16 PM | | | Please respond to | | | "Exchange Discussions" | | | | |--------+-----------------------------------> >----------------------------------------------------------------------- >---- ------------------------------------------------------------| | | | To: "Exchange Discussions" <[EMAIL PROTECTED]> | | cc: | | Subject: RE: New Virus outbreak | >----------------------------------------------------------------------- >---- ------------------------------------------------------------| Wow. That's mighty nice of them to get something out before the end of the day.... -----Original Message----- From: James Winzenz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 2:15 PM To: Exchange Discussions Subject: RE: New Virus outbreak Just got released officially about 20 minutes ago. Definition is from 12/4, version 31204p. James Winzenz, MCSE, A+ Associate Systems Administrator Peregrine Systems, Inc. -----Original Message----- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 4:28 PM To: Exchange Discussions Subject: RE: New Virus outbreak I've been hitting live update on Norton AV 2001 on my desktop every hour today. Nothing past 28 Nov. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 Stop plate Tectonics! -----Original Message----- From: Denis Baldwin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 2:36 PM To: Exchange Discussions Subject: RE: New Virus outbreak Ooops.. <insert foot in mouth). We use Symantec and Trend here. I know Trend has been picking it up all day with the new defs, but Norton must not have a new def out yet. I just checked again and it looks like Nov. 28th is the latest for Norton. Denis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Network Issues Sent: Tuesday, December 04, 2001 2:28 PM To: Exchange Discussions Subject: RE: New Virus outbreak Where did you find the defs? I am unable to download it from Symantec's site as it still as the defs dated 28Nov2001 and LiveUpdate says that we have the current defs. -----Original Message----- From: Denis Baldwin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 11:16 AM To: Exchange Discussions Subject: RE: New Virus outbreak Yep. Has been available for a few hours, I believe. Denis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Network Issues Sent: Tuesday, December 04, 2001 2:10 PM To: Exchange Discussions Subject: RE: New Virus outbreak Does anyone know if Symantec has come out with a def update for this virus? -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 10:53 AM To: Exchange Discussions Subject: RE: New Virus outbreak I concur. I don't think there is a way. -----Original Message----- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 10:53 AM To: Exchange Discussions Subject: RE: New Virus outbreak No.. not that I have found. The attachment gets stripped out and the mail goes on it's merry way to the user. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 Believe nothing because it is written in books. Believe nothing because wise men say it is so. Believe nothing because it is religious doctrine. Believe it only because you yourself know it to be true. -- Buddha -----Original Message----- From: Bowles, John L. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 1:44 PM To: Exchange Discussions Subject: RE: New Virus outbreak Alright, but even if it blocks the attachment it still sends mail to the user. Is there anyway to stop that? ___________________________ John Bowles Exchange Administrator Enterprise Support & Engineering Celera Genomics [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 1:37 PM To: Exchange Discussions Subject: RE: New Virus outbreak It will block the attachments first. So it never gets scanned, just deleted. -----Original Message----- From: Bowles, John L. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 10:37 AM To: Exchange Discussions Subject: RE: New Virus outbreak After updating to pattern file 177 is anyone getting the email alerts "Virus Found"? All I'm still getting is attachment blocking alerts? Doesn't seem like the pattern file has kicked in. Has anyone experienced this?? ___________________________ John Bowles Exchange Administrator Enterprise Support & Engineering Celera Genomics [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 1:17 PM To: Exchange Discussions Subject: RE: New Virus outbreak Probably some user that has hotmail or something. I just sent an email to all my users begging them not to use it today. -----Original Message----- From: Schneider, Rudy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 10:18 AM To: Exchange Discussions Subject: RE: New Virus outbreak Even though we were blocking .scr we still had the virus explode within...BUMMER!!! Trend 177 catches it...have updated...now to get the PCs infected... rudy ;-) Network Engineer/E-Mail Administrator VLC, an Anchor Gaming Company 2311 South 7th Ave Bozeman, MT 59715 mailto:[EMAIL PROTECTED] -----Original Message----- From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 10:05 AM To: Exchange Discussions Subject: RE: New Virus outbreak We have been blocking .scr's for a LONG time, but we have seen 5 of these blocked already this morning. Jim Blunt Network / Exchange Admin -----Original Message----- X-Sybari-Space: 00000000 00000000 00000000 00000000 From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 9:02 AM To: Exchange Discussions Subject: RE: New Virus outbreak I initiated a block on .SCR extensions in ScanMail. As soon as I initiated a block I started seeing it. Shit!!! I'm waiting for Trend to get a pattern, but I would suggest blocking until it's available. -----Original Message----- From: Usachev Oleg [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 11:25 AM To: Exchange Discussions Subject: RE: New Virus outbreak http://www.viruslist.com/eng/default.asp?tnews=2&nview=1&id=1264&page=0 -----Original Message----- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 7:14 PM To: Exchange Discussions Subject: RE: New Virus outbreak Any links to any info? Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -----Original Message----- From: Hurst, Paul [mailto:[EMAIL PROTECTED]] Sent: 04 December 2001 16:15 To: Exchange Discussions Subject: New Virus outbreak Please note that there is a new Email virus out with an attachment Gone.scr Cheers Paul Standards are like toothbrushes, everybody agrees you should have one, but no one wants to use yours ********************************************************************** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony UK. (05) ********************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
