Careful before spreading such a rumor, the detecters may well be
oversensiitve at this point.
McAffee did the same to me *because* a guy had posted to the mailing lust
and email containing a portion of the javascript.
I would suggest considering the source of teh messaging being blocked, that
it is like they the message was benign and they too had a portion of code in
it that set the alarm bells off.
regards
Dean
-----Original Message-----
From: Greg Page [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 20 September 2001 12:49 p.m.
To: NT System Admin Issues
Subject: Well, this is reassuring...
Antigen for Exchange found readme.exe infected with JScript/Nimda.A.Worm
(CA(InoculateIT)) worm. The message is currently Purged. The message, "SANS
NewsBites Vol. 3 Num. 38", was sent from The SANS Institute and was
discovered in IMC Queues\Inbound located at ORGANIZATION/SITE-1/ALEXAPP001.
Greg
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
***************************************************
This e-mail is not an official statement of the
Waikato Regional Council unless otherwise stated.
Visit our website http://www.ew.govt.nz
***************************************************
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
