RE: Virus heads up
I disagree with their analysis. It's clearly self-replicating, and that, combined with the fact that it doesn't infect files, makes it a worm. Yes, it requires some human intervention, but so do most other worms. The only real difference is that the email just contains a link to the worm, but not the worm itself. -Peter -Original Message- From: Børre Nilsen [mailto:Borre.Nilsen@;riksutstillinger.no] Sent: Wednesday, November 13, 2002 7:36 To: Exchange Discussions Subject: RE: Virus heads up http://www.f-secure.com/v-descs/friendgr.shtml Børre Nilsen Førstekonsulent IT/Senior Executive Officer IT Riksutstillinger/National Touring Exhibition Postboks 4762 Sofienberg N-0506 Oslo Norway Tlf (sentr. b.) +47 22 99 10 70 Tlf (direkte innvalg) +47 22 99 10 81 Fax +47 22 99 10 71 www.riksutstillinger.no ### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] __ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
http://www.f-secure.com/v-descs/friendgr.shtml Børre Nilsen Førstekonsulent IT/Senior Executive Officer IT Riksutstillinger/National Touring Exhibition Postboks 4762 Sofienberg N-0506 Oslo Norway Tlf (sentr. b.) +47 22 99 10 70 Tlf (direkte innvalg) +47 22 99 10 81 Fax +47 22 99 10 71 www.riksutstillinger.no ### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
due (dodgy finder here) I meant SUE -Original Message- From: Hurst, Paul [mailto:Paul.Hurst@;eu.sony.com] Sent: 13 November 2002 13:09 To: Exchange Discussions Subject: RE: Virus heads up How long do you reckon before one of these companies due an AV company from block their 'legal' (choke) SPAM, as the spy ware companies did! Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -Original Message- From: Busby, Jacob [mailto:jacob.busby@;hants.gov.uk] Sent: 13 November 2002 12:06 To: Exchange Discussions Subject: RE: Virus heads up > It clearly isn't a virus, but it might not be stretching > things too much to call it a worm. It's really the delivery > method that's different, along with the attempt to make it > vaguely legal. But there's a big difference between legal and ethical. Personally I'd just block the users looking the the affected URLs. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] ** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (05) ** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] *** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (04) *** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
How long do you reckon before one of these companies due an AV company from block their 'legal' (choke) SPAM, as the spy ware companies did! Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -Original Message- From: Busby, Jacob [mailto:jacob.busby@;hants.gov.uk] Sent: 13 November 2002 12:06 To: Exchange Discussions Subject: RE: Virus heads up > It clearly isn't a virus, but it might not be stretching > things too much to call it a worm. It's really the delivery > method that's different, along with the attempt to make it > vaguely legal. But there's a big difference between legal and ethical. Personally I'd just block the users looking the the affected URLs. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] ** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (05) ** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
> It clearly isn't a virus, but it might not be stretching > things too much to call it a worm. It's really the delivery > method that's different, along with the attempt to make it > vaguely legal. But there's a big difference between legal and ethical. Personally I'd just block the users looking the the affected URLs. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Trend Office Scan does clean it. It was cleaning it early last week. Timothy J. Hooks, MCSE Columbus, Ohio 43215 -Original Message- From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] Sent: Friday, November 08, 2002 12:42 PM To: Exchange Discussions Subject: RE: Virus heads up ROFL They really are pretty good folks, but sometimes you have to hit them with a brick to get them to notice things. What irked me about this was that well after I had alerted the department to this problem, the security group issued a warning *after* a user managed to get infected with this one. It was one of those "we have just discovered the following virus, which has infected a user workstation". Okay - so neither the Help Desk nor SECURITY (!!!) paid any attention to the warning I sent. *sigh* A prophet is without honor in her own land. Darcy -Original Message- From: Andy David [mailto:davida@;vss.com] Sent: Friday, November 08, 2002 9:26 AM To: Exchange Discussions Subject: RE: Virus heads up Maybe they didnt notice the little envelope icon in the system tray... -Original Message- From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] Sent: Friday, November 08, 2002 12:24 PM To: Exchange Discussions Subject: RE: Virus heads up I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/searc
RE: Virus heads up
Field of Worms? -Peter -Original Message- From: Andy David [mailto:davida@;vss.com] Sent: Tuesday, November 12, 2002 9:52 To: Exchange Discussions Subject: RE: Virus heads up If they click it, it will come. Reason 252 I like Tumbleweed MMS. And this whole thread was sitting in quarantine. Sweet. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 11:24 AM To: Exchange Discussions Subject: RE: Virus heads up Right... but there's nothing for an e-mail server to catch/filter since all that is transmitted is a URL and the luser has to download said exe from a web browser. > martined -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] __ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
If they click it, it will come. Reason 252 I like Tumbleweed MMS. And this whole thread was sitting in quarantine. Sweet. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 11:24 AM To: Exchange Discussions Subject: RE: Virus heads up Right... but there's nothing for an e-mail server to catch/filter since all that is transmitted is a URL and the luser has to download said exe from a web browser. > martined -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
If they click it, it will come. Reason 252 I like Tumbleweed MMS. And this whole thread was sitting in quarantine. Sweet. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 11:24 AM To: Exchange Discussions Subject: RE: Virus heads up Right... but there's nothing for an e-mail server to catch/filter since all that is transmitted is a URL and the luser has to download said exe from a web browser. > martined -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
No, the virus patterns for Scanmail don't protect you from users sending or receiving e-mail. And no, technically, this isn't a virus (as much as it hurts to agree with Precht), but that doesn't stop an AV company from writing definitions which will block 'harmful' executables. Trend already does this, and I suspect that if you send the actual exe through e-mail, it might very well be blocked and/or deleted. However, that's not how the thing propagates. If this is a significant issue, who handles your DNS? If it's handled in house, the list of URLs the thing currently uses ought to have been entered into bogus DNS zones on your DNS servers so user don't have the opportunity to access the URLs in question. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 10:12 AM > To: Exchange Discussions > > OK so the pattern is just protecting us from the other actions that take > place if someone clicks on the URL, and the WORM_FRIENDGRT.B is not really > a > virus? > I am happy to delete these messages but some users still ignore the > warnings > we have given and it starts sending messages which I would have hoped > would > be caught by the pattern file. > > -Original Message- > From: Chris Scharff [mailto:chris_scharff@;messageone.com] > Sent: 12 November 2002 15:40 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Um... there's no virus sent via e-mail, thus Scanmail has nothing to > clean. > > > -Original Message- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We are > > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > > successfully clean the virus. Are there any specific settings I should > set > > in Scanmail? > > Thanks in advance. > > Phil > > > > -Original Message- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > > But bad things tend to happen every time they do. Like users infecting > > themselves with a new virus. > > > > Darcy > > > > -Original Message- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -Original Message- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month > > now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages to > > all > > your contacts. > > > > -- > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -Original Message- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subjec
RE: Virus heads up
Thanks to everyone for their replies. I was worried in case the pattern was not doing its job. We've got inbound from the Internet covered but have the same problem as everyone else in that users don't do as they are told! Thanks again. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: 12 November 2002 16:24 To: Exchange Discussions Subject: RE: Virus heads up Right... but there's nothing for an e-mail server to catch/filter since all that is transmitted is a URL and the luser has to download said exe from a web browser. > -Original Message- > From: Blunt, James H (Jim) [mailto:jhblunt@;bhi-erc.com] > Sent: Tuesday, November 12, 2002 10:03 AM > To: Exchange Discussions > > True enough, but due to customer feedback, Symantec has added this spam > tactic to their virus definition files and you can no longer install this > .exe file on a machine that is the running the current version of Symantec > Anti-Virus with the current definition files. > > > -Original Message- > From: Chris Scharff [mailto:chris_scharff@;messageone.com] > Sent: Tuesday, November 12, 2002 7:40 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > Um... there's no virus sent via e-mail, thus Scanmail has nothing to > clean. > > > -Original Message- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We > > are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to > > see it successfully clean the virus. Are there any specific settings I > > should set in Scanmail? Thanks in advance. > > Phil > > > > -----Original Message- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore > > me. But bad things tend to happen every time they do. Like users > > infecting themselves with a new virus. > > > > Darcy > > > > -Original Message- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -Original Message- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages > > to all your contacts. > > > > -- > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -Original Message- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subject: Virus heads up > > > > > > > > > Just to let you all know one of our customer got hit with the > > > Friend-Greeting virus a little bit ago. From what I have learned > > > Trend is the only one talking about this now and are calling
RE: Virus heads up
It clearly isn't a virus, but it might not be stretching things too much to call it a worm. It's really the delivery method that's different, along with the attempt to make it vaguely legal. -Peter -Original Message- From: Atkinson, Daniel [mailto:datkinson@;sevenww.co.uk] Sent: Tuesday, November 12, 2002 7:55 To: Exchange Discussions Subject: RE: Virus heads up You need to configure trend e-manager (if you have it) to block it with a rule that detects something in the subject line or message body. This is not a virus, it is more of a confidence trick, although NAV is now detecting the software that installs if you follow the link. As usual, this is causing much confusion amongst users... > > -Original Message- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We are > > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > > successfully clean the virus. Are there any specific settings I should > set > > in Scanmail? > > Thanks in advance. > > Phil > > > > -Original Message- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > > But bad things tend to happen every time they do. Like users infecting > > themselves with a new virus. > > > > Darcy > > > > -Original Message----- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -Original Message- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month > > now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages to > > all > > your contacts. > > > > -- > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -Original Message- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subject: Virus heads up > > > > > > > > > Just to let you all know one of our customer got hit with the > > > Friend-Greeting virus a little bit ago. From what I have > > > learned Trend is > > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > > > The actions we are taking are blocking the following domain > > > at the firewall > > > > > http://www.Friend-Greetings.com > > > > Hope this helps. > > > > Cheers. > > > > Nate Couch > > EDS Messaging > > > > _ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > &
RE: Virus heads up
Do you have desktop AV in place? If so, it should be preventing users from launching the program. If not, consider this a lesson in why you should have AV at multiple layers of your system. Darcy -Original Message- From: Young, Phil [mailto:phil.young@;wcom.co.uk] Sent: Tuesday, November 12, 2002 8:12 AM To: Exchange Discussions Subject: RE: Virus heads up OK so the pattern is just protecting us from the other actions that take place if someone clicks on the URL, and the WORM_FRIENDGRT.B is not really a virus? I am happy to delete these messages but some users still ignore the warnings we have given and it starts sending messages which I would have hoped would be caught by the pattern file. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: 12 November 2002 15:40 To: Exchange Discussions Subject: RE: Virus heads up Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We are > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > successfully clean the virus. Are there any specific settings I should set > in Scanmail? > Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > But bad things tend to happen every time they do. Like users infecting > themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month > now. > > It says in the EULA-that-noone-ever-reads that it will send messages to > all > your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have > > learned Trend is > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain > > at the firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp &g
RE: Virus heads up
Right... but there's nothing for an e-mail server to catch/filter since all that is transmitted is a URL and the luser has to download said exe from a web browser. > -Original Message- > From: Blunt, James H (Jim) [mailto:jhblunt@;bhi-erc.com] > Sent: Tuesday, November 12, 2002 10:03 AM > To: Exchange Discussions > > True enough, but due to customer feedback, Symantec has added this spam > tactic to their virus definition files and you can no longer install this > .exe file on a machine that is the running the current version of Symantec > Anti-Virus with the current definition files. > > > -Original Message- > From: Chris Scharff [mailto:chris_scharff@;messageone.com] > Sent: Tuesday, November 12, 2002 7:40 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > Um... there's no virus sent via e-mail, thus Scanmail has nothing to > clean. > > > -Original Message- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We > > are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to > > see it successfully clean the virus. Are there any specific settings I > > should set in Scanmail? Thanks in advance. > > Phil > > > > -Original Message- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore > > me. But bad things tend to happen every time they do. Like users > > infecting themselves with a new virus. > > > > Darcy > > > > -Original Message- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -Original Message- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages > > to all your contacts. > > > > -- > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -Original Message- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subject: Virus heads up > > > > > > > > > Just to let you all know one of our customer got hit with the > > > Friend-Greeting virus a little bit ago. From what I have learned > > > Trend is the only one talking about this now and are calling it > > > FRIENDGRT.B. > > > > > > The actions we are taking are blocking the following domain at the > > > firewall > > > > > http://www.Friend-Greetings.com > > > > Hope this helps. > > > > Cheers. > > > > Nate Couch > > EDS Messaging > > > > _
RE: Virus heads up
Exactly. OfficeScan will catch it once the user activates the program, but that's no fun. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 7:40 AM To: Exchange Discussions Subject: RE: Virus heads up Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We > are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to > see it successfully clean the virus. Are there any specific settings I > should set in Scanmail? Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore > me. But bad things tend to happen every time they do. Like users > infecting themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month now. > > It says in the EULA-that-noone-ever-reads that it will send messages > to all your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have learned > > Trend is the only one talking about this now and are calling it > > FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain at the > > firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > > === > This email and its contents are confidential. If you > are not the intended recipient, please do not disclose > or use the information within this email or its > attachments. If you have received this email in error, > please delete it immediately. Thank you. > === > > _ > List
RE: Virus heads up
OK so the pattern is just protecting us from the other actions that take place if someone clicks on the URL, and the WORM_FRIENDGRT.B is not really a virus? I am happy to delete these messages but some users still ignore the warnings we have given and it starts sending messages which I would have hoped would be caught by the pattern file. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: 12 November 2002 15:40 To: Exchange Discussions Subject: RE: Virus heads up Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We are > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > successfully clean the virus. Are there any specific settings I should set > in Scanmail? > Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > But bad things tend to happen every time they do. Like users infecting > themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month > now. > > It says in the EULA-that-noone-ever-reads that it will send messages to > all > your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have > > learned Trend is > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain > > at the firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > > === > This email and its contents are confidential. If you > are not the intended recipient, please do not disclose > or use the information within this email or its > attachments. I
RE: Virus heads up
The folks at CaliberCollision.com may want to rethink your SPAM filters (although I doubt you'll get this). I just got this message from your system, for the message I sent below. Trend SMEX Content Filter has detected sensitive content. Place = Exchange Discussions; ; ; Exchange Discussions Sender = Blunt, James H (Jim) Subject = RE: Virus heads up Delivery Time = November 12, 2002 (Tuesday) 08:05:21 Policy = SPAM Content Filter Action on this mail = Delete message Warning message from administrator: An email message you sent to Caliber's electronic email system was not delivered. Your message was intercepted as the contents were not in compliance with Caliber's internal electronic mail standard. -Original Message- From: Blunt, James H (Jim) [mailto:jhblunt@;bhi-erc.com] Sent: Tuesday, November 12, 2002 8:03 AM To: Exchange Discussions Subject: RE: Virus heads up True enough, but due to customer feedback, Symantec has added this spam tactic to their virus definition files and you can no longer install this .exe file on a machine that is the running the current version of Symantec Anti-Virus with the current definition files. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 7:40 AM To: Exchange Discussions Subject: RE: Virus heads up Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We > are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to > see it successfully clean the virus. Are there any specific settings I > should set in Scanmail? Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore > me. But bad things tend to happen every time they do. Like users > infecting themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month now. > > It says in the EULA-that-noone-ever-reads that it will send messages > to all your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have learned > > Trend is the only one talking about this now and are calling it > > FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain at the > > firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FA
RE: Virus heads up
You need to configure trend e-manager (if you have it) to block it with a rule that detects something in the subject line or message body. This is not a virus, it is more of a confidence trick, although NAV is now detecting the software that installs if you follow the link. As usual, this is causing much confusion amongst users... > > -Original Message- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We are > > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > > successfully clean the virus. Are there any specific settings I should > set > > in Scanmail? > > Thanks in advance. > > Phil > > > > -Original Message- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > > But bad things tend to happen every time they do. Like users infecting > > themselves with a new virus. > > > > Darcy > > > > -Original Message----- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -Original Message- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month > > now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages to > > all > > your contacts. > > > > -- > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -Original Message- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subject: Virus heads up > > > > > > > > > Just to let you all know one of our customer got hit with the > > > Friend-Greeting virus a little bit ago. From what I have > > > learned Trend is > > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > > > The actions we are taking are blocking the following domain > > > at the firewall > > > > > http://www.Friend-Greetings.com > > > > Hope this helps. > > > > Cheers. > > > > Nate Couch > > EDS Messaging > > > > _ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin:[EMAIL PROTECTED] > > > > _ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leav
RE: Virus heads up
True enough, but due to customer feedback, Symantec has added this spam tactic to their virus definition files and you can no longer install this .exe file on a machine that is the running the current version of Symantec Anti-Virus with the current definition files. -Original Message- From: Chris Scharff [mailto:chris_scharff@;messageone.com] Sent: Tuesday, November 12, 2002 7:40 AM To: Exchange Discussions Subject: RE: Virus heads up Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We > are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to > see it successfully clean the virus. Are there any specific settings I > should set in Scanmail? Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore > me. But bad things tend to happen every time they do. Like users > infecting themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month now. > > It says in the EULA-that-noone-ever-reads that it will send messages > to all your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have learned > > Trend is the only one talking about this now and are calling it > > FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain at the > > firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > > === > This email and its contents are confidential. If you > are not the intended recipient, please do not disclose > or use the information within this email or its > attachments. If you have
RE: Virus heads up
Um... there's no virus sent via e-mail, thus Scanmail has nothing to clean. > -Original Message- > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > Sent: Tuesday, November 12, 2002 8:55 AM > To: Exchange Discussions > > Hi, > Has anyone successfully cleaned this virus using Trend Scanmail. We are > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > successfully clean the virus. Are there any specific settings I should set > in Scanmail? > Thanks in advance. > Phil > > -Original Message- > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > Sent: 11 November 2002 14:48 > To: Exchange Discussions > Subject: RE: Virus heads up > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > But bad things tend to happen every time they do. Like users infecting > themselves with a new virus. > > Darcy > > -Original Message- > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > Sent: Sunday, November 10, 2002 4:08 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > > I don't believe you. > > You are impossible to ignore. > > I think these are also associated... > www.cool-downloads.com > www.cool-downloads.net > www.friend-greetings.com > www.friend-greeting.com > www.friend-greetings.net > www.friend-greeting.net > www.friend-cards.net > > William > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > Sent: Friday, November 08, 2002 9:24 AM > To: Exchange Discussions > > I'm still going to forward this to our Help Desk. I warned them, and > our security and network teams, about it when it first came around. A > few days later our Security team sent out a notice that it had made it > in and infected some desktops. > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > Apparently they ignored the warning. > > Darcy > > -Original Message- > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > Sent: Friday, November 08, 2002 9:09 AM > To: Exchange Discussions > Subject: RE: Virus heads up > > > That's not *technically* a virus, but its been around for close to a > month > now. > > It says in the EULA-that-noone-ever-reads that it will send messages to > all > your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have > > learned Trend is > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain > > at the firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > > === > This email and its contents are confidential. If you > are not the intended recipient, please do not disclose > or use the information within this email or its > attachments. If you have received this email in error, > please delete it immediately. Thank you. > === > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > > _
RE: Virus heads up
It is not really a virus as much as SPAM. Just block those domains on your internet connection/proxy/firewall so the users cannot access those sites. And also use Trends eManager(30 day free trial) to block those incoming emails. Brian Dugas MIS Director Summit Technical Services, Inc. Ph: 401-736-8323 ext. 11 Fax:401-738-9813 Email: [EMAIL PROTECTED] Web: http://www.summit-technical.com -Original Message- From: Stephen Grant [mailto:grant@;fsna.com] Sent: Tuesday, November 12, 2002 10:09 AM To: Exchange Discussions Subject: RE: Virus heads up I received this helpful e-mail from our AntiVirus agent last week. No machines have been hit yet. I will post it here in the hopes that it answers some questions. Steve BEGIN PASTE There is a new spam hoax being sent around the internet provided by the following company: Permissioned Media Inc., based in Panama. The e-mail will appear in your inbox and will ask you to click upon a link to view the greeting card you have been sent. The link is not necessarily related to a greeting card site, and after clicking on it, the website will state that software needs to be installed on your machine for you to view the greeting card. The terms and conditions of the license states that by agreeing to the installation of the software, you are also agreeing that a copy of the greeting card e-mail can be sent to everyone in your address book. If you accept the terms of the agreement, the executable will send a copy of the e-mail to the contacts in your Outlook Address Book. Saying no to the agreement will prevent the mass mailing of the hyperlink to the recipients listed in the Outlook Address Book. The following domains have been linked to this new hoax: www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net There is no attachment included in the message sent out but rather a link that must be agreed to to install the executable that will mail out an invitation to addresse 's in the Outlook Address Book. The actual program is not a worm or virus, but rather a scam to promote the company that created the spammer. The Subject of the message is as follows: Subject: %Recipient% you have an E-Card from %Sender%. Body: %Recipient%, %sender% has sent you an greeting card -- a postcard from Friend-Greetings.com. You can pickup your greeting card at Friend-Greetings.com by clicking on the link below. http://www.friend-greeting./%number%/pickup.html?code=%name%&id=%number% < Modified for non execution > A content filter can be set using the following: * greeting card from * This will block the message from coming into an environment. Since there is no attachment related to the message virus detection will not be able to detect any executable on the message to remove its functionality. The executable is placed on desktop system by visiting the link provided in the message and agreeing to the license agreement. Sybari Software will continue to monitor the situation. We are providing this information due to concerns posed by several inquiries to support. Thank You, Sybari Software, Inc. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I received this helpful e-mail from our AntiVirus agent last week. No machines have been hit yet. I will post it here in the hopes that it answers some questions. Steve BEGIN PASTE There is a new spam hoax being sent around the internet provided by the following company: Permissioned Media Inc., based in Panama. The e-mail will appear in your inbox and will ask you to click upon a link to view the greeting card you have been sent. The link is not necessarily related to a greeting card site, and after clicking on it, the website will state that software needs to be installed on your machine for you to view the greeting card. The terms and conditions of the license states that by agreeing to the installation of the software, you are also agreeing that a copy of the greeting card e-mail can be sent to everyone in your address book. If you accept the terms of the agreement, the executable will send a copy of the e-mail to the contacts in your Outlook Address Book. Saying no to the agreement will prevent the mass mailing of the hyperlink to the recipients listed in the Outlook Address Book. The following domains have been linked to this new hoax: www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net There is no attachment included in the message sent out but rather a link that must be agreed to to install the executable that will mail out an invitation to addresse 's in the Outlook Address Book. The actual program is not a worm or virus, but rather a scam to promote the company that created the spammer. The Subject of the message is as follows: Subject: %Recipient% you have an E-Card from %Sender%. Body: %Recipient%, %sender% has sent you an greeting card -- a postcard from Friend-Greetings.com. You can pickup your greeting card at Friend-Greetings.com by clicking on the link below. http://www.friend-greeting./%number%/pickup.html?code=%name%&id=%number% < Modified for non execution > A content filter can be set using the following: * greeting card from * This will block the message from coming into an environment. Since there is no attachment related to the message virus detection will not be able to detect any executable on the message to remove its functionality. The executable is placed on desktop system by visiting the link provided in the message and agreeing to the license agreement. Sybari Software will continue to monitor the situation. We are providing this information due to concerns posed by several inquiries to support. Thank You, Sybari Software, Inc. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Hi, Has anyone successfully cleaned this virus using Trend Scanmail. We are running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it successfully clean the virus. Are there any specific settings I should set in Scanmail? Thanks in advance. Phil -Original Message- From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] Sent: 11 November 2002 14:48 To: Exchange Discussions Subject: RE: Virus heads up Well, our Help Desk staff has proven that it *is* possible to ignore me. But bad things tend to happen every time they do. Like users infecting themselves with a new virus. Darcy -Original Message- From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] Sent: Sunday, November 10, 2002 4:08 AM To: Exchange Discussions Subject: RE: Virus heads up I don't believe you. You are impossible to ignore. I think these are also associated... www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net William -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams Sent: Friday, November 08, 2002 9:24 AM To: Exchange Discussions I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exc
RE: Virus heads up
Well, our Help Desk staff has proven that it *is* possible to ignore me. But bad things tend to happen every time they do. Like users infecting themselves with a new virus. Darcy -Original Message- From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] Sent: Sunday, November 10, 2002 4:08 AM To: Exchange Discussions Subject: RE: Virus heads up I don't believe you. You are impossible to ignore. I think these are also associated... www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net William -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams Sent: Friday, November 08, 2002 9:24 AM To: Exchange Discussions I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Reason 25 I like Tumbleweed MMS. Very easy to block these before they even get to the mail server. Reason Number One I hate Tumbleweed: Support for disclaimers. :( -Original Message- From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] Sent: Sunday, November 10, 2002 7:08 AM To: Exchange Discussions Subject: RE: Virus heads up I don't believe you. You are impossible to ignore. I think these are also associated... www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net William -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams Sent: Friday, November 08, 2002 9:24 AM To: Exchange Discussions I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I don't believe you. You are impossible to ignore. I think these are also associated... www.cool-downloads.com www.cool-downloads.net www.friend-greetings.com www.friend-greeting.com www.friend-greetings.net www.friend-greeting.net www.friend-cards.net William -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams Sent: Friday, November 08, 2002 9:24 AM To: Exchange Discussions I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
What is your definition of a virus? Just because it doesnt reformat your hard drive doesnt mean its not a virus. -Original Message- From: David N. Precht [mailto:discussions@;entrysecurity.com] Sent: Friday, November 08, 2002 8:35 PM To: Exchange Discussions Subject: RE: Virus heads up I didn't think it was a virus. I thought it was only social engineering -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-224131@;ls.swynk.com] On Behalf Of Couch, Nate Sent: Friday, November 08, 2002 11:59 To: Exchange Discussions Subject: Virus heads up Just to let you all know one of our customer got hit with the Friend-Greeting virus a little bit ago. From what I have learned Trend is the only one talking about this now and are calling it FRIENDGRT.B. The actions we are taking are blocking the following domain at the firewall http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I didn't think it was a virus. I thought it was only social engineering -Original Message- From: [EMAIL PROTECTED] [mailto:bounce-exchange-224131@;ls.swynk.com] On Behalf Of Couch, Nate Sent: Friday, November 08, 2002 11:59 To: Exchange Discussions Subject: Virus heads up Just to let you all know one of our customer got hit with the Friend-Greeting virus a little bit ago. From what I have learned Trend is the only one talking about this now and are calling it FRIENDGRT.B. The actions we are taking are blocking the following domain at the firewall http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I think theres also one www.friendgreetings.com -Original Message- From: Couch, Nate [mailto:nate.couch@;eds.com] Sent: Friday, November 08, 2002 1:05 PM To: Exchange Discussions Subject: RE: Virus heads up Very good point Geoff. Thanks for the correction. > -- > From: Dale Geoffrey Edwards > Reply To: [EMAIL PROTECTED] > Sent: Friday, November 8, 2002 11:31 > To: [EMAIL PROTECTED] > Subject: RE: Virus heads up > > There are two (2) actually. Friend-Greeting.com and Friend-Greetings.com. > > Gèoff... > > > > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain at the > firewall > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I was blocking them by the original subject line, but there's a new subject line making the rounds this morning, which is possibly why it's "popular" gain. Previously they all had the subject "* you have an E-card from *", but now there's an "* you have a greeting card from *" varient. -Peter -Original Message- From: Couch, Nate [mailto:nate.couch@;eds.com] Sent: Friday, November 08, 2002 10:05 To: Exchange Discussions Subject: RE: Virus heads up Very good point Geoff. Thanks for the correction. > -- > From: Dale Geoffrey Edwards > Reply To: [EMAIL PROTECTED] > Sent: Friday, November 8, 2002 11:31 > To: [EMAIL PROTECTED] > Subject: RE: Virus heads up > > There are two (2) actually. Friend-Greeting.com and Friend-Greetings.com. > > Gèoff... > > > > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain at the > firewall > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] __ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Very good point Geoff. Thanks for the correction. > -- > From: Dale Geoffrey Edwards > Reply To: [EMAIL PROTECTED] > Sent: Friday, November 8, 2002 11:31 > To: [EMAIL PROTECTED] > Subject: RE: Virus heads up > > There are two (2) actually. Friend-Greeting.com and Friend-Greetings.com. > > Gèoff... > > > > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain at the > firewall > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
They upgraded to OL XP and had it turned off, of course! ::-Original Message- ::From: Andy David [mailto:davida@;vss.com] ::Sent: Friday, November 08, 2002 12:26 PM ::To: Exchange Discussions ::Subject: RE: Virus heads up :: :: ::Maybe they didnt notice the little envelope icon in the system tray... :: :: :: ::-Original Message- ::From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] ::Sent: Friday, November 08, 2002 12:24 PM ::To: Exchange Discussions ::Subject: RE: Virus heads up :: :: ::I'm still going to forward this to our Help Desk. I warned ::them, and our security and network teams, about it when it ::first came around. A few days later our Security team sent ::out a notice that it had made it in and infected some desktops. :: ::HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE ::days ago. Apparently they ignored the warning. :: ::Darcy :: ::-Original Message- ::From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] ::Sent: Friday, November 08, 2002 9:09 AM ::To: Exchange Discussions ::Subject: RE: Virus heads up :: :: ::That's not *technically* a virus, but its been around for ::close to a month now. :: ::It says in the EULA-that-noone-ever-reads that it will send ::messages to all your contacts. :: ::-- ::Roger D. Seielstad - MCSE ::Sr. Systems Administrator ::Inovis - Formerly Harbinger and Extricity ::Atlanta, GA :: :: ::> -Original Message- ::> From: Couch, Nate [mailto:nate.couch@;eds.com] ::> Sent: Friday, November 08, 2002 11:59 AM ::> To: Exchange Discussions ::> Subject: Virus heads up ::> ::> ::> Just to let you all know one of our customer got hit with the ::> Friend-Greeting virus a little bit ago. From what I have learned ::> Trend is the only one talking about this now and are calling it ::> FRIENDGRT.B. ::> ::> The actions we are taking are blocking the following domain ::> at the firewall ::> :: http://www.Friend-Greetings.com :: ::Hope this helps. :: ::Cheers. :: ::Nate Couch ::EDS Messaging :: ::_ ::List posting FAQ: http://www.swinc.com/resource/exch_faq.htm ::Archives: http://www.swynk.com/sitesearch/search.asp ::To unsubscribe: mailto:leave-exchange@;ls.swynk.com ::Exchange List admin:[EMAIL PROTECTED] :: ::_ ::List posting FAQ: http://www.swinc.com/resource/exch_faq.htm ::Archives: http://www.swynk.com/sitesearch/search.asp ::To unsubscribe: mailto:leave-exchange@;ls.swynk.com ::Exchange List admin:[EMAIL PROTECTED] :: :: ::=== ::This email and its contents are confidential. If you ::are not the intended recipient, please do not disclose ::or use the information within this email or its ::attachments. If you have received this email in error, ::please delete it immediately. Thank you. ::=== :: ::_ ::List posting FAQ: http://www.swinc.com/resource/exch_faq.htm ::Archives: http://www.swynk.com/sitesearch/search.asp ::To unsubscribe: mailto:leave-exchange@;ls.swynk.com ::Exchange List admin:[EMAIL PROTECTED] :: ::-- :: ::The information contained in this email message is privileged ::and confidential information intended only for the use of the ::individual or entity to whom it is addressed. If the reader ::of this message is not the intended recipient, you are hereby ::notified that any dissemination, distribution or copy of this ::message is strictly prohibited. If you have received this ::email in error, please immediately notify Veronis Suhler ::Stevenson by telephone (212)935-4990, fax (212)381-8168, or ::email ([EMAIL PROTECTED]) and delete the message. Thank you. :: ::== :: :: :: ::_ ::List posting FAQ: http://www.swinc.com/resource/exch_faq.htm ::Archives: http://www.swynk.com/sitesearch/search.asp ::To unsubscribe: mailto:leave-exchange@;ls.swynk.com ::Exchange List admin:[EMAIL PROTECTED] :: _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
ROFL They really are pretty good folks, but sometimes you have to hit them with a brick to get them to notice things. What irked me about this was that well after I had alerted the department to this problem, the security group issued a warning *after* a user managed to get infected with this one. It was one of those "we have just discovered the following virus, which has infected a user workstation". Okay - so neither the Help Desk nor SECURITY (!!!) paid any attention to the warning I sent. *sigh* A prophet is without honor in her own land. Darcy -Original Message- From: Andy David [mailto:davida@;vss.com] Sent: Friday, November 08, 2002 9:26 AM To: Exchange Discussions Subject: RE: Virus heads up Maybe they didnt notice the little envelope icon in the system tray... -Original Message- From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] Sent: Friday, November 08, 2002 12:24 PM To: Exchange Discussions Subject: RE: Virus heads up I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information with
RE: Virus heads up
There are two (2) actually. Friend-Greeting.com and Friend-Greetings.com. Gèoff... -Original Message- From: Couch, Nate [mailto:nate.couch@;eds.com] Sent: Friday, November 08, 2002 11:59 AM To: Exchange Discussions Subject: Virus heads up Just to let you all know one of our customer got hit with the Friend-Greeting virus a little bit ago. From what I have learned Trend is the only one talking about this now and are calling it FRIENDGRT.B. The actions we are taking are blocking the following domain at the firewall http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Funny, an AV rep just recently was quoted as saying "We don't call everything a virus because when you go to the doctor you don't want him telling you that every illness you have is a broken leg." -- be - MOS It is better to give than to lend, and it costs about the same. > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 12:31 PM > To: Exchange Discussions > Subject: RE: Virus heads up > > > I haven't heard of this one myself until today (does that > make me a bad > admin - shoot no.) I did see info on the FriendGrt.A. > > As for not being "technically" a virus my only answer to that > is . . a rose > is a rose is a rose, or a virus is a virus is a virus. > Whether that be a > chain letter or a greeting card website taking advantage of > myopic users. > > Cheers. > > Nate _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I haven't heard of this one myself until today (does that make me a bad admin - shoot no.) I did see info on the FriendGrt.A. As for not being "technically" a virus my only answer to that is . . a rose is a rose is a rose, or a virus is a virus is a virus. Whether that be a chain letter or a greeting card website taking advantage of myopic users. Cheers. Nate > -- > From: Roger Seielstad > Reply To: Exchange Discussions > Sent: Friday, November 8, 2002 11:08 > To: Exchange Discussions > Subject: RE: Virus heads up > > That's not *technically* a virus, but its been around for close to a month > now. > > It says in the EULA-that-noone-ever-reads that it will send messages to > all > your contacts. > > -- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis - Formerly Harbinger and Extricity > Atlanta, GA > > > > -Original Message- > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > Sent: Friday, November 08, 2002 11:59 AM > > To: Exchange Discussions > > Subject: Virus heads up > > > > > > Just to let you all know one of our customer got hit with the > > Friend-Greeting virus a little bit ago. From what I have > > learned Trend is > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > The actions we are taking are blocking the following domain > > at the firewall > > > http://www.Friend-Greetings.com > > Hope this helps. > > Cheers. > > Nate Couch > EDS Messaging > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
Maybe they didnt notice the little envelope icon in the system tray... -Original Message- From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] Sent: Friday, November 08, 2002 12:24 PM To: Exchange Discussions Subject: RE: Virus heads up I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
I'm still going to forward this to our Help Desk. I warned them, and our security and network teams, about it when it first came around. A few days later our Security team sent out a notice that it had made it in and infected some desktops. HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. Apparently they ignored the warning. Darcy -Original Message- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Friday, November 08, 2002 9:09 AM To: Exchange Discussions Subject: RE: Virus heads up That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] === This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. === _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
RE: Virus heads up
That's not *technically* a virus, but its been around for close to a month now. It says in the EULA-that-noone-ever-reads that it will send messages to all your contacts. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Couch, Nate [mailto:nate.couch@;eds.com] > Sent: Friday, November 08, 2002 11:59 AM > To: Exchange Discussions > Subject: Virus heads up > > > Just to let you all know one of our customer got hit with the > Friend-Greeting virus a little bit ago. From what I have > learned Trend is > the only one talking about this now and are calling it FRIENDGRT.B. > > The actions we are taking are blocking the following domain > at the firewall > http://www.Friend-Greetings.com Hope this helps. Cheers. Nate Couch EDS Messaging _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin:[EMAIL PROTECTED]
