I've seen that happen here too. We block the files and antigen catches it but the media player/real player does start. Nothing bad happens after that which is a good thing.
Sandhya -----Original Message----- From: Durkee, Peter [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 3:40 PM To: Exchange Discussions Subject: RE: WORM_KLEZ.G I'm afraid you've gone and mystified me. If you're blocking all those filetypes, how can Klez get through to open Windows Media Player? -Peter -----Original Message----- From: Tener, Richard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 12:32 To: Exchange Discussions Subject: RE: WORM_KLEZ.G how do you stop it from opening windows media player even if i am blocking scr exe pif bat vbs js and com. I am using scanmail for exchange verson 3.52 -----Original Message----- From: Durkee, Peter [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 1:31 PM To: Exchange Discussions Subject: RE: WORM_KLEZ.G I've seen some klez-g messages with bat and scr attachments. Of course there may be disagreement on exactly what constitutes the G variant. -Peter -----Original Message----- From: WILLIAMS,JESSICA D [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 9:35 To: Exchange Discussions Subject: RE: WORM_KLEZ.G If I am reading this article correctly, then it will have a random extension if it is a earlier variation of KLEZ. This particular version has either .exe or a double extension. Please correct me if I'm wrong. http://www.viruslist.com/eng/viruslist.html?id=4292 Jessica -----Original Message----- From: Andy David [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 11:26 AM To: Exchange Discussions Subject: RE: WORM_KLEZ.G I was under the impression that the extension is random. -----Original Message----- From: WILLIAMS,JESSICA D [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 12:14 PM To: Exchange Discussions Subject: RE: WORM_KLEZ.G Block .exe -----Original Message----- From: Tener, Richard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 11:18 AM To: Exchange Discussions Subject: WORM_KLEZ.G DOES ANYONE KNOW OF THE BEST WAY TO BLOCK THIS VIRUS WORM_KLEZ.G RICH _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] ---------------------------------------------------------------------------- -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. ============================================================================ == _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] ______________________________________________ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] ______________________________________________ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
