RE: ANTIGEN users
Aha - didn't look close enough. Looks as though it is the TROJ_VOTE.A virus. Never mind on that. Still glad I am blocking .exe's though. Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems, Inc. -Original Message- From: John Hanks [mailto:[EMAIL PROTECTED]] Sent: Monday, September 24, 2001 3:56 PM To: MS-Exchange Admin Issues Subject:RE: ANTIGEN users In over a year I've had less than a dozen legitimate (legitimate == dept. of biology related) *.exe attachments that I had to go to the trouble of delivering manually. Compared to the headache of cleaning up even one machine, this is wonderful. jbh -Original Message- From: Arnold, Jamie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 19, 2001 8:58 AM To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been pulling *.exe for months now. No one really complains and if they do...I pretend to listen. J -Original Message- From: Nelson Aguillon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 1:17 PM To: MS-Exchange Admin Issues Subject: ANTIGEN users Here are the settings for the filter to deal with the new virus w32Nimda.a@mm mailto:w32Nimda.a@mm Set the following filter to deal with this issue: File Name: readme.exe File types: all types Action: Delete: remove contents Nelson Aguillón 626.937.6693 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm -BEGIN PGP SIGNATURE- Version: PGP 7.0.1 iQA/AwUBO6iyjopKvuUKuEZYEQKc3ACcDxXFUTCqLrj09Z7jW+7H0Zid0O0AnjCJ BKfquq3KXrvQq9j5HjX93BSK =ZdHn -END PGP SIGNATURE- List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: ANTIGEN users
Here's a list of some of the .exe files we've blocked or cleared out of our IS in the last few days: perfectman lurve loveforecaster spinning-around skiing gift coolpicture invaders dizzy the dino elf bowling beertend britney4 monet sheep rudolf lamb where-my-dog fight blender dance cat-a-pult frogpult funtest rabbit and more and more... All work-related, of course :-) - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Benjamin Winzenz [mailto:[EMAIL PROTECTED]] Sent: 25 September 2001 13:18 To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users We just started blocking it, and I get a copy of all the Scanmail messages stating which attachment was blocked. It really is amazing to actually see how many are not business-related. Plus, wth the new reporting another possible .exe virus (wtc.exe), makes me even more glad that we are blocking them. Haven't seen anything on AV vendor's sites regarding that one, but it was talked about on the radio both late last night and this morning. Anyone else heard anything regarding this? Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems, Inc. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: ANTIGEN users
You cleaned out elf-bowling?! But it's so much fun! Regards, Sean Martin, MCSE Network Administrator Ribelin Lowell Company Insurance Brokers, Inc. 3111 C Street, Suite 300 Anchorage, Alaska 99503 Ph: (907) 561-1250 Fax: (907) 561-4315 Cell: (907) 229-0885 Email: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 25, 2001 4:37 AM To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users Here's a list of some of the .exe files we've blocked or cleared out of our IS in the last few days: perfectman lurve loveforecaster spinning-around skiing gift coolpicture invaders dizzy the dino elf bowling beertend britney4 monet sheep rudolf lamb where-my-dog fight blender dance cat-a-pult frogpult funtest rabbit and more and more... All work-related, of course :-) - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Benjamin Winzenz [mailto:[EMAIL PROTECTED]] Sent: 25 September 2001 13:18 To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users We just started blocking it, and I get a copy of all the Scanmail messages stating which attachment was blocked. It really is amazing to actually see how many are not business-related. Plus, wth the new reporting another possible .exe virus (wtc.exe), makes me even more glad that we are blocking them. Haven't seen anything on AV vendor's sites regarding that one, but it was talked about on the radio both late last night and this morning. Anyone else heard anything regarding this? Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems, Inc. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm DO NOT read, copy or disseminate this communication unless you are the intended addressee. This e-mail communication contains confidential and/or privileged information intended only for the addressee. If you have received this communication in error, please call us immediately at (907) 561-1250 and ask to speak to the sender of the communication. Also, please e-mail the sender and notify the sender immediately that you have received the communication in error. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: ANTIGEN users
In over a year I've had less than a dozen legitimate (legitimate == dept. of biology related) *.exe attachments that I had to go to the trouble of delivering manually. Compared to the headache of cleaning up even one machine, this is wonderful. jbh -Original Message- From: Arnold, Jamie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 19, 2001 8:58 AM To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been pulling *.exe for months now. No one really complains and if they do...I pretend to listen. J -Original Message- From: Nelson Aguillon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 1:17 PM To: MS-Exchange Admin Issues Subject: ANTIGEN users Here are the settings for the filter to deal with the new virus w32Nimda.a@mm mailto:w32Nimda.a@mm Set the following filter to deal with this issue: File Name: readme.exe File types: all types Action: Delete: remove contents Nelson Aguillón 626.937.6693 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm -BEGIN PGP SIGNATURE- Version: PGP 7.0.1 iQA/AwUBO6iyjopKvuUKuEZYEQKc3ACcDxXFUTCqLrj09Z7jW+7H0Zid0O0AnjCJ BKfquq3KXrvQq9j5HjX93BSK =ZdHn -END PGP SIGNATURE- List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: ANTIGEN users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been pulling *.exe for months now. No one really complains and if they do...I pretend to listen. J -Original Message- From: Nelson Aguillon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 1:17 PM To: MS-Exchange Admin Issues Subject: ANTIGEN users Here are the settings for the filter to deal with the new virus w32Nimda.a@mm mailto:w32Nimda.a@mm Set the following filter to deal with this issue: File Name: readme.exe File types: all types Action: Delete: remove contents Nelson Aguillón 626.937.6693 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm -BEGIN PGP SIGNATURE- Version: PGP 7.0.1 iQA/AwUBO6iyjopKvuUKuEZYEQKc3ACcDxXFUTCqLrj09Z7jW+7H0Zid0O0AnjCJ BKfquq3KXrvQq9j5HjX93BSK =ZdHn -END PGP SIGNATURE- List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
