I dunno, but you certainly won't hear Elves bowling... -- Drew ******************************** Visit http://www.drewncapris.net! Go! Go there now! "The legislature's job is to write law. It's the executive branch's job to interpret law."— George W. Bush, Austin, Texas, Nov. 22, 2000
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Couch, Nate Sent: Friday, January 04, 2002 2:04 PM To: Exchange Discussions Subject: RE: New Virus ShakerWorld variant? Do I hear an AMEN! > ---------- > From: Martin Blackstone > Reply To: Exchange Discussions > Sent: Friday, January 4, 2002 13:29 > To: Exchange Discussions > Subject: RE: New Virus ShakerWorld variant? > > Better yet, block all .EXE files. > > -----Original Message----- > From: Ben Schorr [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 04, 2002 11:31 AM > To: Exchange Discussions > Subject: RE: New Virus ShakerWorld variant? > > > What about the "shake.exe" file indicated in the message? > > Aloha, > > -Ben- > Ben M. Schorr, MVP-Outlook, CNA, MCPx3 > Director of Information Services > Damon Key Leong Kupchak Hastert > http://www.hawaiilawyer.com > > > > -----Original Message----- > > From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] > > Sent: Friday, January 04, 2002 9:19 AM > > To: Exchange Discussions > > Subject: New Virus ShakerWorld variant? > > > > > > I just got a message from OAR.NET referring to a virus alert. > > Still trying to find out more about it, but I thought I > > would post this just in case. Trying to find out more on this > > one to see if there is an attachment I can block. > > > > > > From: Jodi Santini [mailto:[EMAIL PROTECTED]] > > Sent: Friday, January 04, 2002 1:07 PM > > To: [EMAIL PROTECTED] > > Subject: Virus Alert - W32/ShakerWorld > > > > > > Posted on notice.oar.net 1/4/02: > > > > Virus Alert: > > > > There is a variation of the W32/ShakerWorld virus making its > > way around the Internet. We are have not found information > > on this virus at Symantec or CERT yet, but this what we have > > learned thus far from our internal security folks which you > > will want to watch out for on your networks: > > > > o Random 8 char. file in the System directory > > o Shake.exe in email (MassMailer) > > o NetBIOS connections spreading virus to servers > > o Registry entry 'sysinfo' under the run statement. Note that we are > > seeing variants in the name of the key sysinfo<random chars> > > > > People who have been hit have gotten this virus thorugh > > email. This virus can install a key in the registry of the > > infected systems. > > > > This is the information we have received at this time. > > > > Thank You, > > > > Jodi > > > > > > > > Pete Pfefferkorn > > Senior Systems Engineer/Mail Administrator > > University of Cincinnati > > 51 Goodman Street > > Cincinnati, OH 45221 > > Phone - (513) 556-9076 > > Fax - (513) 556-2042 > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
