"It's not a bug, it's a feature!"

> -----Original Message-----
> From: James Winzenz [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, April 18, 2002 9:59 AM
> To: Exchange Discussions
> Subject: RE: WORM_KLEZ.G
> 
> 
> "It's a beta, what did you expect?"
> 
> James Winzenz, MCSE, A+
> Associate Systems Administrator
> Peregrine Systems, Inc.
> 
> 
> -----Original Message-----
> From: Andy David [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, April 18, 2002 9:57 AM
> To: Exchange Discussions
> Subject: RE: WORM_KLEZ.G
> 
> 
> "It worked when I did it"
> 
> 
> -----Original Message-----
> From: James Winzenz [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, April 18, 2002 9:54 AM
> To: Exchange Discussions
> Subject: RE: WORM_KLEZ.G
> 
> 
> "It's not supposed to do that!"
> 
> James Winzenz, MCSE, A+
> Associate Systems Administrator
> Peregrine Systems, Inc.
> 
> 
> -----Original Message-----
> From: Chris Levis [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, April 18, 2002 9:28 AM
> To: Exchange Discussions
> Subject: RE: WORM_KLEZ.G
> 
> 
> "CDW has the lowest prices!"
> 
> Promotional magic 8-balls..... man.
> 
> > -----Original Message-----
> > From: Stephen Mynhier [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 8:16 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > You refer to your virus software as "him" and you think that "he" 
> > talks to you?
> > 
> > Now take your Magic 8-Ball and shake it up again and let's 
> see what is
> > tells us.
> > 
> > -----Original Message-----
> > From: Tener, Richard [mailto:[EMAIL PROTECTED]]
> > Posted At: Wednesday, April 17, 2002 4:01 PM
> > Posted To: Exchange Discussion List
> > Conversation: WORM_KLEZ.G
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > Thats the virus softwares job we pay him good money to do this.  He 
> > told me that no one is infected.
> > 
> > -----Original Message-----
> > From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 4:24 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > Why you no answer my question??
> > Quack!
> > 
> > -----Original Message-----
> > From: Andy David [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 1:01 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > Dont you get paid to find out if anyone is infected or not?
> > 
> > 
> > 
> > -----Original Message-----
> > From: Tener, Richard [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 3:57 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > I dont know if I anyone is infected or not we just keep receiving a 
> > ton of emails with viruses in them.
> > 
> > -----Original Message-----
> > From: Sandhya Pai [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 3:48 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > I've seen that happen here too.  We block the files and antigen 
> > catches it but the media player/real player does start.  
> Nothing bad 
> > happens after that which is a good thing.
> > 
> > Sandhya
> > 
> > -----Original Message-----
> > From: Durkee, Peter [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 3:40 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > I'm afraid you've gone and mystified me. If you're blocking 
> all those
> > filetypes, how can Klez get through to open Windows Media Player?
> > 
> > -Peter
> > 
> > 
> > -----Original Message-----
> > From: Tener, Richard [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 12:32
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > how do you stop it from opening windows media player even if i am
> > blocking scr exe pif bat vbs js and com.  I am using scanmail for 
> > exchange verson 3.52
> > 
> > -----Original Message-----
> > From: Durkee, Peter [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 1:31 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > I've seen some klez-g messages with bat and scr 
> attachments. Of course
> > there may be disagreement on exactly what constitutes the G variant.
> > 
> > -Peter
> > 
> > 
> > -----Original Message-----
> > From: WILLIAMS,JESSICA D [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 9:35
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > If I am reading this article correctly, then it will have a random
> > extension if it is a earlier variation of KLEZ.  This particular 
> > version has either .exe or a double extension.  Please correct me if
> > I'm wrong.
> > 
> > http://www.viruslist.com/eng/viruslist.html?id=4292
> > 
> > Jessica
> > 
> > 
> > -----Original Message-----
> > From: Andy David [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 11:26 AM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > I was under the impression that the extension is random.
> > 
> > 
> > -----Original Message-----
> > From: WILLIAMS,JESSICA D [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 12:14 PM
> > To: Exchange Discussions
> > Subject: RE: WORM_KLEZ.G
> > 
> > 
> > Block .exe
> > 
> > -----Original Message-----
> > From: Tener, Richard [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, April 17, 2002 11:18 AM
> > To: Exchange Discussions
> > Subject: WORM_KLEZ.G
> > 
> > 
> > DOES ANYONE KNOW OF THE BEST WAY TO BLOCK THIS VIRUS WORM_KLEZ.G
> > 
> > RICH
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > --------------------------------------------------------------
> > ----------
> > ----
> > --
> > The information contained in this email message is privileged and
> > confidential information intended only for the use of the 
> individual 
> > or entity to whom it is addressed.  If the reader of this 
> message is 
> > not the intended recipient, you are hereby notified that any
> > dissemination,
> > distribution or copy of this message is strictly prohibited.  If you
> > have received this email in error, please immediately notify Veronis
> > Suhler Stevenson by telephone (212)935-4990, fax 
> > (212)381-8168, or email
> > ([EMAIL PROTECTED]) and delete the message.  Thank you.
> > 
> > ==============================================================
> > ==========
> > ====
> > ==
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > ______________________________________________
> > This message is private or privileged.  If you are not the 
> person for
> > whom this message is intended, please delete it and notify me 
> > immediately, and please do not copy or send this message to anyone 
> > else.
> > 
> > 
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > ______________________________________________
> > This message is private or privileged.  If you are not the 
> person for
> > whom this message is intended, please delete it and notify me 
> > immediately, and please do not copy or send this message to anyone 
> > else.
> > 
> > 
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > --------------------------------------------------------------
> > ----------
> > ----
> > --
> > The information contained in this email message is privileged and
> > confidential information intended only for the use of the 
> individual 
> > or entity to whom it is addressed.  If the reader of this 
> message is 
> > not the intended recipient, you are hereby notified that any
> > dissemination,
> > distribution or copy of this message is strictly prohibited.  If you
> > have received this email in error, please immediately notify Veronis
> > Suhler Stevenson by telephone (212)935-4990, fax 
> > (212)381-8168, or email
> > ([EMAIL PROTECTED]) and delete the message.  Thank you.
> > 
> > ==============================================================
> > ==========
> > ====
> > ==
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> --------------------------------------------------------------
> --------------
> --
> The information contained in this email message is privileged and
> confidential information intended only for the use of the 
> individual or
> entity to whom it is addressed.  If the reader of this 
> message is not the
> intended recipient, you are hereby notified that any dissemination,
> distribution or copy of this message is strictly prohibited.  
> If you have
> received this email in error, please immediately notify Veronis Suhler
> Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
> ([EMAIL PROTECTED]) and delete the message.  Thank you.
> 
> ==============================================================
> ==============
> ==
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to