Hit by Goner - Yes
Rebuild server - No
Shut Down Mail Server - Yes until NAI released dat for Groupshield for Goner virus.
Blocking .scr - Yes
How did it happen? Goner has other variants with other extensions that NO ONE would be blocking.....
-----Original Message-----
From: Ropiak Steve - NAO Florence Office Exchange and Bar Code Admn. [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 8:45 AM
To: MS-Exchange Admin Issues
Subject: RE: How could .pif file get through....
Hit by Goner = yes
Rebuild server(s) = No
Shout many expletives at stupid users = yes
mit freundlichen Grüßen,(Best Regards),
Steve Ropiak
ZF Group NAO
CERT, Exchange and Bar Code Administrator
(207) 989-9115 voice
(207) 989-8722 fax
(513) 317-0197 cell
[EMAIL PROTECTED]
-----Original Message-----
From: Sawatzke, Jeff [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 9:41 AM
To: MS-Exchange Admin Issues
Subject: RE: How could .pif file get through....
Who would read e-mail from a server?
-----Original Message-----
From: Bruce Harrison [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 8:29 AM
To: MS-Exchange Admin Issues
Subject: RE: How could .pif file get through....
Ouch. Informal survey: Anyone had to rebuild a server due to the Goner?
-----Original Message-----
From: Crosby, Tim (Sarcom) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 9:06 AM
To: MS-Exchange Admin Issues
Subject: RE: How could .pif file get through....
Yep, we got hit by Goner despite having all .scr extensions blocked.
-----Original Message-----
From: Craig Cameron [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 9:00 AM
To: MS-Exchange Admin Issues
Subject: How could .pif file get through....
We blocked the usual set of attachments in Groupshield for Exchange 5.5 some months ago. Including .pif
Yet this morning I received an e-mail with a .pif attachement?
Anyone had this problem?
Craig
----------------------------------------------------------------------------
--------------------------------------------
This E-Mail is confidential and is intended for the addressee only. If you are not the intended recipient, you must not /par disclose or use the information contained in it. If you received this e-Mail in error, please contact the sender /par immediately and delete the document. This e-Mail is for information purposes only and is not intended to be relied upon /par or used as a substitute for the medical advice of physicians. Specific advice should always be sought on any individual /par matter, in particular matters relating to the addressee's health and any symptoms that may require diagnosis or medical /par attention. /par
----------------------------------------------------------------------------
--------------------------------------------
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm