RE: W32/Bugbear-A spreading rapidly

2002-10-03 Thread Allan Johnson
: Durkee, Peter [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 02, 2002 4:37 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Either that or you're blocking all the files through your file filtering so they're blending in with all the Klez background noise. The

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Dale Geoffrey Edwards
ednesday, October 02, 2002 12:37 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly It's now a neck and neck race which virus is hitting us more Klex or Bugbear-A. Thank the programmers for ScanMail and Nemex. John Matteson Geac Corporate ISS (404) 239 - 2

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Durkee, Peter
--Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 02, 2002 12:06 To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Gulp! Either it's making it thru Sophos and Antigen or I'm not getting any. I sure hope it's

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Aaron Brasslett
So far, I've only have seen one Bugbear-A compared to the dozen or more Klez that I get each day. Aaron -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 02, 2002 1:37 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading ra

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread blambert
002 12:37 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly It's now a neck and neck race which virus is hitting us more Klex or Bugbear-A. Thank the programmers for ScanMail and Nemex. John Matteson Geac Corporate ISS (404) 239 - 2981 Atlanta, Georgia, USA. -Origin

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Weatherly, Rob
: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly We are getting hit by it, but Mailsweeper for SMTP is doing its job. -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Woodruff, Michael
We are getting hit by it, but Mailsweeper for SMTP is doing its job. -Original Message- From: Candee Vaglica [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly http:[EMAIL PROTECTED] tml

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread John Matteson
onday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly http:[EMAIL PROTECTED] -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spre

RE: W32/Bugbear-A spreading rapidly

2002-10-02 Thread Candee Vaglica
http:[EMAIL PROTECTED] -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I haven't seen it yet either and I can't find anything on it yet. Anyon

RE: W32/Bugbear-A spreading rapidly

2002-10-01 Thread Etts, Russell
ROTECTED]] Sent: Monday, September 30, 2002 5:03 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly The only one I've seen so far had a double extension, .HTM.SCR. -Peter -Original Message- From: Etts, Russell [mailto:[EMAIL PROTECTED]] Sent: Monday, Septemb

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Chuck Parkey
ssage- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 5:30 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly You should be on 3.8 Best way to do this is in attachment blocking by extension, then duplicate by name in the other field. Exe;sc

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Martin Blackstone
Discussions Subject: RE: W32/Bugbear-A spreading rapidly Those who were having Trend Scanmail successfully catch this by using attachment screening could you please reply with which version engine etc. you are using? My Scanmail did not catch it in spite of my having *.scr in my attachment extensions to

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Smith, Ronni
Those who were having Trend Scanmail successfully catch this by using attachment screening could you please reply with which version engine etc. you are using? My Scanmail did not catch it in spite of my having *.scr in my attachment extensions to block list. It still didn't with *.*.scr either. I

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Blunt, James H (Jim)
hange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Here is what I was able to find on Symantec's site. Looks like Symantec has known about it and been protected against variants of this kind, since 07/02. http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.soapspy.

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread David Weinstein
Exe and dll from mcafee.com -Original Message- From: Etts, Russell [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 4:00 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Hello Can you tell me what extensions the virus uses?? Thanks Russell

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Roger Haxton
PROTECTED] --- Adding manpower to a late software project makes it later. -Original Message- From: Etts, Russell [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 16:00 To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Hello Can y

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Durkee, Peter
The only one I've seen so far had a double extension, .HTM.SCR. -Peter -Original Message- From: Etts, Russell [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 14:00 To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly Hello Can you tell me what exten

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Etts, Russell
Hello Can you tell me what extensions the virus uses?? Thanks Russell -Original Message- From: Roger Haxton [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 4:10 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I've had two come in here s

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Roger Haxton
15:14 To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly And it probably still wont -Original Message- From: Roger Haxton [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 1:10 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I&#x

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Blunt, James H (Jim)
/data/pws.hooker.trojan.ht ml -Original Message- From: Ryan Fennema [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 12:41 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly A little info from MSNBC, the most I have found so far: http://www.msnbc.com/news/81511

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Martin Blackstone
And it probably still wont -Original Message- From: Roger Haxton [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 1:10 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I've had two come in here so far. They got stripped because of their exte

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Roger Haxton
I've had two come in here so far. They got stripped because of their extension. My NAI virus scan on my desk wouldn't even catch it until I updated my defs. -- Roger Haxton Network Administrator Sure-Tel [EMAIL PROTECTED] ---

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Gagrani, Kishore
Subject: RE: W32/Bugbear-A spreading rapidly No sign of it yet on any of our customers. Nate Couch EDS Messaging > -- > From: John Q Jr. > Reply To: Exchange Discussions > Sent: Monday, September 30, 2002 14:09 > To: Exchange Discussions > Subject:

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Hague, Jeff
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUG BEAR.A Try this: Jeff Hague -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Ryan Fennema
: Scott Force [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 3:35 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly I haven't seen it yet either and I can't find anything on it yet. Anyone have any info on it, (is it an attachment)?? > I haven&#

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Chris Scharff
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUGBEAR .A > -Original Message- > From: Scott Force [mailto:[EMAIL PROTECTED]] > Sent: Monday, September 30, 2002 2:35 PM > To: Exchange Discussions > Subject: RE: W32/Bugbear-A spreading rapidly > &

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Scott Force
t; > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Monday, September 30, 2002 12:26 > To: Exchange Discussions > Subject: RE: W32/Bugbear-A spreading rapidly > > > Same here; none yet. > > Bill Lambert > Endoxy Healthcare &g

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Durkee, Peter
gbear-A spreading rapidly Same here; none yet. Bill Lambert Endoxy Healthcare 847-941-9206 [EMAIL PROTECTED] -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 2:18 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread blambert
Same here; none yet. Bill Lambert Endoxy Healthcare 847-941-9206 [EMAIL PROTECTED] -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED]] Sent: Monday, September 30, 2002 2:18 PM To: Exchange Discussions Subject: RE: W32/Bugbear-A spreading rapidly No sign of it yet on

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Couch, Nate
No sign of it yet on any of our customers. Nate Couch EDS Messaging > -- > From: John Q Jr. > Reply To: Exchange Discussions > Sent: Monday, September 30, 2002 14:09 > To: Exchange Discussions > Subject: W32/Bugbear-A spreading rapidly > > Anyone getting hit

RE: W32/Bugbear-A spreading rapidly

2002-09-30 Thread Ryan Fennema
Same here. Updated when it first came out, then double checked the gateway scanners to make sure they received the update when the High Alert came out. Haven't seen one yet. -Ryan N. Ryan Fennema, MCSE Network Administrator X-Rite Incorporated - Grandville, MI Phone: (616) 257-2165 Fax: