[Declude.Virus] [OT]: BugBear
Anyone notice a rise in Bugbear lately? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT]: BugBear
No but man did we get hit with Sobig last night! Thank you Declude and Mcafee! You make my network admin life easy! Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze - Hostmaster Sent: Thursday, June 05, 2003 9:40 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [OT]: BugBear Anyone notice a rise in Bugbear lately? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT]: BugBear
Yes its anew variant of Bugbear worse than the first one -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Foulks Sent: 5. juni 2003 15:52 To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] [OT]: BugBear No but man did we get hit with Sobig last night! Thank you Declude and Mcafee! You make my network admin life easy! Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze - Hostmaster Sent: Thursday, June 05, 2003 9:40 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [OT]: BugBear Anyone notice a rise in Bugbear lately? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] [OT]: BugBear
Oh yes - there is a NASTY new variant out: http://vil.nai.com/vil/content/v_100358.htm Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Thursday, June 05, 2003 09:40 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] [OT]: BugBear Anyone notice a rise in Bugbear lately? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] high virus traffic today?
Markus, are you sure that there is a "C" variant out now? Both RAV and F-Prot released updates to catch the new "B" variant: == VIRUS ALERT! Win32/[EMAIL PROTECTED] June 5, 2003 - RAV AntiVirus Team is alerting all computer users that a dangerous Internet worm, called Win32/[EMAIL PROTECTED], is reported to have a high infection level in the last 24 hours. This worm is classified as "Potentially destructive" by RAV Team. == Bill - Original Message - From: "Markus Gufler" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2003 6:00 AM Subject: RE: [Declude.Virus] high virus traffic today? > > > Sophos and McAfee just minutes ago announced a new variant of > > Bugbear, > > which apparently started spreading yesterday. They both have > > reported that > > it is spreading fast. > > It's 3:00 PM now here, and we are already on more then 300% of a > "normal" day. > Strange: The new version is Bugbear.C > We catch here only Bugbear.B but have running definitely the latest > definitions. > > Markus > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] high virus traffic today?
> ... are you sure that there is a "C" variant out now? > Both RAV and F-Prot released updates to catch the new "B" variant: Hmmm, strange! After Scott's posting that Nai and Sophos has released new information I've read this on Nai's Virus-Lab. Now the "last update" has changed and the "C" is now a "B" Markus :-) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] FW: Viruses coming from your domain
I can't believe that the big messagelabs are not able to filter out virus-warnings for forging email worms. BTW: Scott, on days like this we have to disable the recipient-warning because our customers are not very satisfied recieving 40+ virus-warnings in a single hour. Even if the warnings are the best way to "remind" our customers to our service, a function that limits the warnings per domain and day could be very usefull. Just a suggestion for bring to perfection a already unbeatable product. :-) Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2003 2:42 PM To: [EMAIL PROTECTED] Subject: Viruses coming from your domain Dear Postmaster, MessageLabs have detected an email containing unwanted code being emailed from your domain to our customers. This code may for example be a virus, trojan, joke program, encoded spam or suspicious HTML script. The message sender(s) will have already received an automatic alert. However, you may also wish to take proactive action, especially in the case of viruses, trojans or spam. The list of email addresses and unwanted code is as follows [EMAIL PROTECTED] sent 1 copies of W32/BugBear.B-mm A sample set of mail headers follow at the end of this email. Should you wish to see further information on any viruses indicated, please visit www.messagelabs.com/threatlist for information on the number of copies of this virus currently being detected. Alternatively if you require further support information or believe this message to be a false alarm please contact us either via email [EMAIL PROTECTED], or telephone +44 (0)1285 884466. If you do not wish to receive any more of these alert messages, or if you would prefer that they were sent to an address other than [EMAIL PROTECTED], please email [EMAIL PROTECTED] If you would like information on MessageLabs please call us freephone on 0800 917 77 33 or email us at [EMAIL PROTECTED] Thank you. MessageLabs --- Our references: 402474_1054814086 Available mail headers follow: - Headers for 402474_1054814086 Received: (qmail 24880 invoked from network); 5 Jun 2003 11:54:21 - Received: from dns.plavalaguna.hr (HELO proeco.plavalaguna.hr) (195.29.188.8) by server-18.tower-26.messagelabs.com with SMTP; 5 Jun 2003 11:54:21 - Received: from RSRecMediteran (from.plavalaguna.hr [195.29.188.5]) by proeco.plavalaguna.hr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id MF8WS0G4; Thu, 5 Jun 2003 12:47:07 +0200 From: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Subject: Prenotazione MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--3BSX73JZHRJQFM" --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: Scheduler Problems...
Hello All, All of a sudden, my NT Scheduler is not working, therefore I am not getting any updates for viruses and things. When I try to start the scheduler from the services area, I get an error saying "the system can not find the file specified". Anyone know where I can get this file for NT 4.0 SP6a? Also what might of happened to this file? It was working fine just a couple of days ago Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] OT: Scheduler Problems...
Just an update on this, it appears other files have disappeared also. FTP no longer works either. Sounds like some files were deleted some how. Does this mean I might have to recover from a backup? Any other ideas on recovering these files that have disappeared? Thanks All... Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith Sent: Friday, June 06, 2003 7:26 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] OT: Scheduler Problems... Hello All, All of a sudden, my NT Scheduler is not working, therefore I am not getting any updates for viruses and things. When I try to start the scheduler from the services area, I get an error saying "the system can not find the file specified". Anyone know where I can get this file for NT 4.0 SP6a? Also what might of happened to this file? It was working fine just a couple of days ago Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Log File Errors
Hello, On Thursday 05 June 2003 01:31, you wrote: > > Today we had a 'horrible' thing happened with our scanner (have two > > in place F-Prot and InoculateIT), not sure which one had issues: > > > >06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish > >after 60 seconds; terminating. what happens to unfinished virus scanner process? is it terminated completely and correctly? Albertas --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Log File Errors
> >06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish > >after 60 seconds; terminating. what happens to unfinished virus scanner process? is it terminated completely and correctly? Yes, it is terminated completely and correctly, and Declude will continue processing the E-mail as if the virus scanner finished and reported that the E-mail was virus-free. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] OT: Scheduler Problems...
Do you have Auditing setup? Check the security log. I would seriously consider the box has been compromised some how. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Grant Griffith > Sent: Friday, June 06, 2003 5:46 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] OT: Scheduler Problems... > > Just an update on this, it appears other files have disappeared also. FTP > no longer works either. Sounds like some files were deleted some how. Does > this mean I might have to recover from a backup? Any other ideas on > recovering these files that have disappeared? > > Thanks All... > > Sincerely, > Grant Griffith, Vice President > EI8HT LEGS Web Management Co., Inc. > http://www.getafreewebsite.com > 877-483-3393 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith > Sent: Friday, June 06, 2003 7:26 AM > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] OT: Scheduler Problems... > > > Hello All, > > All of a sudden, my NT Scheduler is not working, therefore I am not getting > any updates for viruses and things. When I try to start the scheduler from > the services area, I get an error saying "the system can not find the file > specified". Anyone know where I can get this file for NT 4.0 SP6a? Also > what might of happened to this file? It was working fine just a couple of > days ago > > Thanks! > > Sincerely, > Grant Griffith, Vice President > EI8HT LEGS Web Management Co., Inc. > http://www.getafreewebsite.com > 877-483-3393 > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
