[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 4:37 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Either that or you're blocking all the files through your file filtering so
they're blending in with all the Klez background noise.
The way this is ramping up I
http:[EMAIL PROTECTED]
-Original Message-
From: Scott Force [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I haven't seen it yet either and I can't find anything on it yet. Anyone
have any
, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
http:[EMAIL PROTECTED]
-Original Message-
From: Scott Force [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading
We are getting hit by it, but Mailsweeper for SMTP is doing its job.
-Original Message-
From: Candee Vaglica [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
http:[EMAIL PROTECTED]
tml
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
We are getting hit by it, but Mailsweeper for SMTP is doing its job.
-Original Message-
From: Candee Vaglica [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
It's now a neck and neck race which virus is hitting us more Klex or
Bugbear-A. Thank the programmers for ScanMail and Nemex.
John Matteson
Geac Corporate ISS
(404) 239 - 2981
Atlanta, Georgia, USA.
-Original Message-
From
So far, I've only have seen one Bugbear-A compared to the dozen or more Klez
that I get each day.
Aaron
-Original Message-
From: John Matteson [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 1:37 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 12:06
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Gulp! Either it's making it thru Sophos and Antigen or I'm not getting any.
I sure hope it's the latter.
Bill Lambert
, 2002 12:37 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
It's now a neck and neck race which virus is hitting us more Klex or
Bugbear-A. Thank the programmers for ScanMail and Nemex.
John Matteson
Geac Corporate ISS
(404) 239 - 2981
Atlanta, Georgia, USA
, September 30, 2002 5:03 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
The only one I've seen so far had a double extension, .HTM.SCR.
-Peter
-Original Message-
From: Etts, Russell [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 14:00
To: Exchange
Same here. Updated when it first came out, then double checked the gateway scanners
to make sure they received the update when the High Alert came out. Haven't seen one
yet.
-Ryan
N. Ryan Fennema, MCSE
Network Administrator
X-Rite Incorporated - Grandville, MI
Phone: (616) 257-2165 Fax:
No sign of it yet on any of our customers.
Nate Couch
EDS Messaging
--
From: John Q Jr.
Reply To: Exchange Discussions
Sent: Monday, September 30, 2002 14:09
To: Exchange Discussions
Subject: W32/Bugbear-A spreading rapidly
Anyone getting hit with
Same here; none yet.
Bill Lambert
Endoxy Healthcare
847-941-9206
[EMAIL PROTECTED]
-Original Message-
From: Couch, Nate [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 2:18 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
No sign of it yet
-A spreading rapidly
Same here; none yet.
Bill Lambert
Endoxy Healthcare
847-941-9206
[EMAIL PROTECTED]
-Original Message-
From: Couch, Nate [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 2:18 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 12:26
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Same here; none yet.
Bill Lambert
Endoxy Healthcare
847-941-9206
[EMAIL PROTECTED]
-Original Message-
From: Couch, Nate
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUGBEAR
.A
-Original Message-
From: Scott Force [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 2:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I haven't seen it yet
: Scott Force [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I haven't seen it yet either and I can't find anything on it yet. Anyone
have any info on it, (is it an attachment)??
I haven't seen any yet
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUG
BEAR.A
Try this:
Jeff Hague
-Original Message-
From: Scott Force [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 3:35 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I
Subject: RE: W32/Bugbear-A spreading rapidly
No sign of it yet on any of our customers.
Nate Couch
EDS Messaging
--
From: John Q Jr.
Reply To: Exchange Discussions
Sent: Monday, September 30, 2002 14:09
To: Exchange Discussions
Subject: W32/Bugbear-A spreading
I've had two come in here so far. They got stripped because of their
extension. My NAI virus scan on my desk wouldn't even catch it until I
updated my defs.
--
Roger Haxton
Network Administrator
Sure-Tel
[EMAIL PROTECTED]
And it probably still wont
-Original Message-
From: Roger Haxton [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 1:10 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I've had two come in here so far. They got stripped because of their
extension
/pws.hooker.trojan.ht
ml
-Original Message-
From: Ryan Fennema [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 12:41 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
A little info from MSNBC, the most I have found so far:
http://www.msnbc.com/news/815117.asp
15:14
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
And it probably still wont
-Original Message-
From: Roger Haxton [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 1:10 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I've
Hello
Can you tell me what extensions the virus uses??
Thanks
Russell
-Original Message-
From: Roger Haxton [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 4:10 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
I've had two come in here so far
The only one I've seen so far had a double extension, .HTM.SCR.
-Peter
-Original Message-
From: Etts, Russell [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 14:00
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Hello
Can you tell me what extensions
]
---
Adding manpower to a late software project makes it later.
-Original Message-
From: Etts, Russell [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 16:00
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Hello
Can you tell me
Exe and dll from mcafee.com
-Original Message-
From: Etts, Russell [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 4:00 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Hello
Can you tell me what extensions the virus uses??
Thanks
Russell
Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Here is what I was able to find on Symantec's site. Looks like Symantec has
known about it and been protected against variants of this kind, since
07/02.
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.soapspy.html
http
Those who were having Trend Scanmail successfully catch this by using
attachment screening could you please reply with which version engine etc.
you are using? My Scanmail did not catch it in spite of my having *.scr in
my attachment extensions to block list. It still didn't with *.*.scr either.
Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
Those who were having Trend Scanmail successfully catch this by using
attachment screening could you please reply with which version engine etc.
you are using? My Scanmail did not catch it in spite of my having *.scr in
my attachment extensions
-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 30, 2002 5:30 PM
To: Exchange Discussions
Subject: RE: W32/Bugbear-A spreading rapidly
You should be on 3.8
Best way to do this is in attachment blocking by extension, then duplicate
by name in the other field. Exe;scr;com
31 matches
Mail list logo
