So it would seem, but if you consider why �rjan would send such message
then it's pretty obvious that he didn't know that he sent it. I figure the
mailing list software at Checkpoint removed the virus attachment after
receiving it from �rjan.
Do you really think that "the mail �rjan Sj�str�m sent did not contain the
VBS code"? I disagree.
"Security is not a product, it's a process"
http://www.counterpane.com/crypto-gram-9912.html
Amanda.
On Fri, 13 Oct 2000, Dean Cunningham wrote:
> Um.. the mail �rjan Sj�str�m sent did not contain the VBS code , well at
> least the one sent to me did not.
>
> I think some peoples AV software is a bit sensitive at the moment and you
> are getting false positives. This has been quite common when AV vendors put
> "quick fixes" out. They tidy it up later.
>
> The attachment with the message was a text file with
>
>
> ****************** Virus Warning Message (on the network)
>
> <filename> is removed from here because it contains a virus.
>
> *********************************************************
>
> The <filename> may of triggered it or the message content or a combination
> of both.
>
> This Pres and FBI version was dealt to by my AV product a couple of days ago
> , so I know it detects it.
>
> The message is not from my AV product - mine is a seek and destroy, no namby
> pamby "clean it for you and here you are sir/madam" :-)
>
> And if you think because you have an AV product in place you will never be
> caught... think again... It takes time for the AV vendors to react.. a days
> delay could be too late for you. this is where content scanning tools come
> into their own as an AV defence.
>
> cheers
> deanc
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, 13 October 2000 3:32 AM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: [FW1] RE:
>
>
> Indeed. It is absolutely amazing how often we get e-mail virii on
> *firewall* mailing lists. Why would somebody bother to buy and install
> an expensive firewall if they have e-mail software that executes every
> piece of hostile code that comes in the mail?!? I mean, hello? Is anybody
> home? Some guys really need a clue...
>
>
> Amanda.
>
>
> On Thu, 12 Oct 2000, THELLIER, Francis (Kedros) wrote:
> > The message you sent contains a virus that has been removed by my
> antivirus,
> > please stop to post mail like this here !
> > > De: �rjan Sj�str�m [SMTP:[EMAIL PROTECTED]]
> > > VERY JOKE..! SEE PRESIDENT AND FBI TOP SECRET PICTURES..
>
> ***************************************************
> This e-mail is not an official statement of the
> Waikato Regional Council unless otherwise stated.
> Visit our website http://www.ew.govt.nz
> ***************************************************
>
