RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
http://www.anti-keyloggers.com/ -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 10:58 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Too small, ever since HIPPA started gearing up our blocking list has grown to 78 items :o -Original Message- From: Hunter, Lori [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 9:54 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Reason Number 3842 to use The Blackstone Blocking list. Or at least .exe man! -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 8:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Too small, ever since HIPPA started gearing up our blocking list has grown to 78 items :o -Original Message- From: Hunter, Lori [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 9:54 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Reason Number 3842 to use The Blackstone Blocking list. Or at least .exe man! -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 8:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Reason Number 3842 to use The Blackstone Blocking list. Or at least .exe man! -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 8:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
NAV for Exchange also has an attaching blocking feature..through the registry..but it works ! -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:42 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You have to enter the extensions to block under Scan Policy ~ blocking. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:44 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Yep got that but how do I configure the gateway to stop all .exe's .. not just scan and deliver.. but to quarantine them all -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:29 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS If you have NAVCE, the Gateway product will block attachments -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives:
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
You have to enter the extensions to block under Scan Policy ~ blocking. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:44 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Yep got that but how do I configure the gateway to stop all .exe's .. not just scan and deliver.. but to quarantine them all -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:29 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS If you have NAVCE, the Gateway product will block attachments -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sites
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Try sending it to me. It wont make it. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 7:43 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS .exe -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:31 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS What was the extension on the attachment? -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 7:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Yep got that but how do I configure the gateway to stop all .exe's .. not just scan and deliver.. but to quarantine them all -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:29 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS If you have NAVCE, the Gateway product will block attachments -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
.exe -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:31 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS What was the extension on the attachment? -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 7:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
What was the extension on the attachment? -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 7:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
If you have NAVCE, the Gateway product will block attachments -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 10:28 AM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
I have Norton anti-virus for exchange installed... I can send you the email and chances are .. your mail server will pass on the attachment to you.. Norton for exchange is only scanning attachments and delviers the mails... it is nto able to quarantine all attachmentsI would like to quarantine all attachments.. is there some setting on the exchange that will allow me to quarantine the attachments and deliver the mail... and I can then check the attachments and forward them to the proper reciepient later on -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 5:16 PM To: Exchange Discussions Subject: RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
You should have been blocking this stuff at the Exchange server. Chances are it came as a .EXE file. .EXE is definitely one of the top 10 file types you should be blocking. Winwhatwhere is a legitimate program, so AV on the desktop is not the correct tool to stop it. It never should have made it in to your network in the first place. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 6:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
If you where to use attachment blocking/filtering in some AV products/3rd party soft.. and follow the FAQ with reference to Martin's List of Danger. likely you would have a highly increase percentage of not being infected by such things...at least as in as far as it being mailed to your usersand them saying "Oh look..this looks cool.let open it and see what it does" 2 cents bill P.S. dispite the growning(mine and what Ive read) about NAI GS... I use 4.5sp1HF7 with it working (finally) I fined it does a good job of blocking such things...thus it effectively removes potential user OO's and such. Even better is to also have some type of "prefilter-smtp...thingymabob" (yes thats an engineering term...very scientific and all) which would strip/remove/do away with...these things before they get to your Exch. box. -Original Message- From: Muqeem Syed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 24, 2002 9:37 AM To: Exchange Discussions Subject: SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
SPYWARE called WINWHATWHERE is not detected by ANTI-VIRUS
Dear All, Has anyone come across a spyware called winwhatwhere it was mailed to a user here and he opened it... It was programmed to capture the keystrokes for all passwords... and e-mailed as an attachment... Is there any reputable anti-virus that can actually detect such malicious spywares ... we have norton for exchange, and desktops and file and prin servers... it failed to detect it... furthermore when contacted we were informed that since it is a spyware... norton is designed to ignore such programmed.. like SPYWARE.. since it doesnt want the unsuspecting users to panic unneccessarily I did read about a software called bodetect that claims to stop this kind of programme and infact zonealarm informs the user ... anytime that this winwhatwhere attemtps to connect to the hotmail server on port 25 to stealthly send the email attachment and inform that a programmed was attempting to make an outgoing connection on port 25... .. but other than this personal firewall... are you folks aware of any software that can actually detect all spywares In case any one of you is interested.. just go to www.winwhatwhere.com regards _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
