RE: OT Virus Alert (7:2801) [7:2808]

2001-05-02 Thread Evans, TJ

Another thing to keep in mind - typically NAV, by default, does not check
*all* files.

I always recommend everyone  go into Options and set both
Auto-Protect and Scanner to All Files.  Typically, I would also set the
Heuristics on the scanner to Highest .


Wow - this one does look nasty, especially bullet #2 ... ouch.

o Large scale e-mailing: Uses email addresses from the Windows Address Book
files and Outlook Express Sent Items folder. 
o Causes system instability: Overwrites hard drives, erases CMOS, flashes
the BIOS. 
o Releases confidential info: It could send confidential Microsoft Word
documents to others. 


...above 'tips' may not be relevant in this case, but still a good practice.
Thanks!
TJ

 -Original Message-
From:   Kelly Dew [mailto:[EMAIL PROTECTED]] 
Sent:   Tuesday, May 01, 2001 17:35
To: [EMAIL PROTECTED]
Subject:RE: OT Virus Alert (7:2801) [7:2808]

According to Symantec if you had the latest virus definition files then you
should have been fine. This virus is in the March 13 virus definition file,
and I know that we are covered here at work with it. You might want to check
to make sure that the machines really did have the latest virus definition
files, and contact Symantec to be safe.
This virus is a HIGH threat it seems. l
Kelly Dew
Information Systems Security Officer
Information Security Services
USPS
[EMAIL PROTECTED]

Delivering Trust in a Changing World

-Original Message-
From:   [EMAIL PROTECTED] at INTERNET
Sent:   Tuesday, May 01, 2001 4:57 PM
To: Dew, Kelly W - Raleigh, NC; [EMAIL PROTECTED] at INTERNET
Subject:OT Virus Alert [7:2801]


there is a pretty nasty virus going around
http:[EMAIL PROTECTED]
hit our network yesterday spred to half our Novell users and to our Nt
servers
in a another domain
these user do not have any permissions in the development domain but that
did not stop the virus.
Show how much microsoft security sucks. Norton is slow to reconize this
virus all our machines had the lastest update.
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html Report misconduct and
Nondisclosure
violations to [EMAIL PROTECTED]
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
*
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter. 
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=2874t=2808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT Virus Alert (7:2801) [7:2808]

2001-05-01 Thread Kelly Dew

According to Symantec if you had the latest virus definition files then you
should have been fine. This virus is in the March 13 virus definition file,
and
I know that we are covered here at work with it. You might want to check to
make
sure that the machines really did have the latest virus definition files, and
contact Symantec to be safe.

This virus is a HIGH threat it seems.

Kelly Dew
Information Systems Security Officer
Information Security Services
USPS
[EMAIL PROTECTED]

Delivering Trust in a Changing World


-Original Message-
From: [EMAIL PROTECTED] at INTERNET
Sent: Tuesday, May 01, 2001 4:57 PM
To: Dew, Kelly W - Raleigh, NC; [EMAIL PROTECTED] at INTERNET
Subject: OT Virus Alert [7:2801]


there is a pretty nasty virus going around

http:[EMAIL PROTECTED]

hit our network yesterday spred to half our Novell users and to our Nt
servers
in a another domain
these user do not have any permissions in the development domain but that did
not stop the virus.
Show how much microsoft security sucks. Norton is slow to reconize this virus
all our machines had
the lastest update.
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure
violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=2808t=2808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]