[Declude.Virus] New virus to add to your banned names in virus.cfg

2006-12-30 Thread Colbeck, Andrew
http://isc.sans.org/diary.php?storyid=1988 BANNAME Greeting Card.exe BANNAME Greeting Postcard.exe BANNAME GreetingCard.exe Which may be related to a rash these that my mailserver received on Dec 28th, as the executables are the same size but contain may differences: BANNAME postcard.exe As of

RE: [Declude.Virus] New virus to add to your banned names in virus.cfg

2006-12-30 Thread Colbeck, Andrew
p.s. No, the conversation thread at the end of my posting was not relevant to the antivirus tip, that was simply poor copy and paste on my part. Andrew 8) --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type

RE: [Declude.Virus] New virus to add to your banned names in virus.cfg

2006-12-30 Thread Kami Razvan
Andrew.. Why not block any .exe attachments? In our system AVG is detecting it. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Saturday, December 30, 2006 12:11 PM To: declude.virus@declude.com Subject: [Declude.Virus] New

RE: [Declude.Virus] New virus to add to your banned names in virus.cfg

2006-12-30 Thread Colbeck, Andrew
Why not block any .exe attachments? I don't block .EXE attachments, but that policy may work for others. In my company, we find it very common to receive executables in email, as well as viruses that are plain executables, therefore we neither silently discard them, nor do we reply to likely