Mitigated, as best as I can tell, by having users run without elevated
permissions.
John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.ushttp://www.taylor.k12.fl.us
On Thu, Sep 9, 2010 at 3:37 PM, Kleciak, Clint D A7IT
Appears that we had less than 100 copies come in and our AS caught and dropped
every one of them :-)
From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 2:53 AM
To: MS-Exchange Admin Issues
Subject: RE: Possible Email
:-)
--
*From:* John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
*Sent:* Friday, September 10, 2010 2:53 AM
*To:* MS-Exchange Admin Issues
*Subject:* RE: Possible Email Virus
Mitigated, as best as I can tell, by having users run without elevated
permissions
complaining about the
link being blocked. Sheesh...
Larry
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, September 10, 2010 12:17 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
One thing we noticed is that if a user was not running with admin rights, the
virus couldn't run
]
*Sent:* Friday, September 10, 2010 12:17 PM
*To:* MS-Exchange Admin Issues
*Subject:* Re: Possible Email Virus
One thing we noticed is that if a user was not running with admin rights,
the virus couldn't run...
On Fri, Sep 10, 2010 at 8:41 AM, Don Andrews don.andr...@safeway.com
wrote
What web site did you block?
- Original Message -
From: Larry Brown lc.br...@dplinc.com
To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
Sent: Friday, September 10, 2010 11:23:06 AM
Subject: RE: Possible Email Virus
That wasn’t our experience. Our users do
Message -
From: Larry Brown lc.br...@dplinc.com
To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
Sent: Friday, September 10, 2010 11:23:06 AM
Subject: RE: Possible Email Virus
That wasn’t our experience. Our users do NOT have local admin rights…but
the virus ran
Haw - first time I experienced that was when the I Love You virus came out.
From: Brown, Larry [mailto:lc.br...@dplinc.com]
Sent: Friday, September 10, 2010 9:23 AM
To: MS-Exchange Admin Issues
Subject: RE: Possible Email Virus
That wasn't our experience. Our
[mailto:lc.br...@dplinc.com]
*Sent:* Friday, September 10, 2010 9:23 AM
*To:* MS-Exchange Admin Issues
*Subject:* RE: Possible Email Virus
That wasn’t our experience. Our users do NOT have local admin rights…but
the virus ran anyway.
Of course…this may depend on OS. We are still running XP
I honestly don't know...although I heard them saying it was a web site in the
UK...was handled by our Web Sense admins.
Larry
From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Friday, September 10, 2010 1:13 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
In our case
I remember that day too. Got it mostly cleaned up and a @#%!$ user
opened it up a second time! Grrr... Learned a lot from that little
lesson.
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, September 10, 2010 12:57 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
:* Don Ely [mailto:don@gmail.com]
*Sent:* Friday, September 10, 2010 12:57 PM
*To:* MS-Exchange Admin Issues
*Subject:* Re: Possible Email Virus
I still remember that day very well... Lot's of queue cleaning that day...
On Fri, Sep 10, 2010 at 10:55 AM, Don Andrews don.andr
]
*Sent:* Friday, September 10, 2010 1:13 PM
*To:* MS-Exchange Admin Issues
*Subject:* Re: Possible Email Virus
In our case the link was:
http:// members dot multimania dot co dot uk
Roger Wright
___
When it's GOOD there ain't nothin' like it, and when it's BAD there ain't
nothin
PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
We exmerged the email out of the mailboxes to prevent that...
On Fri, Sep 10, 2010 at 11:07 AM, Maglinger, Paul pmaglin...@scvl.com
wrote:
I remember that day too. Got it mostly cleaned up and a @#%!$ user
opened it up
that was supported by DG.)
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, September 10, 2010 1:57 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
I still remember that day very well... Lot's of queue cleaning that day...
On Fri, Sep 10, 2010 at 10:55 AM, Don Andrews
don.andr
PM
To: MS-Exchange Admin Issues
Subject: RE: Possible Email Virus
I remember that day too. Got it mostly cleaned up and a @#%!$ user opened it
up a second time! Grrr... Learned a lot from that little lesson.
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, September 10, 2010 12:57 PM
Issues
Subject: Re: Possible Email Virus
I still remember that day very well... Lot's of queue cleaning that day...
On Fri, Sep 10, 2010 at 10:55 AM, Don Andrews don.andr...@safeway.com
wrote:
Haw – first time I experienced that was when the I Love You virus came out
Issues
Subject: Re: Possible Email Virus
I still remember that day very well... Lot's of queue cleaning that
day...
On Fri, Sep 10, 2010 at 10:55 AM, Don Andrews don.andr...@safeway.com
wrote:
Haw – first time I experienced that was when the I Love You virus came
out
.
From: Sean Martin [mailto:seanmarti...@gmail.com]
Sent: Friday, September 10, 2010 11:48 AM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
Good story!
You probably could've just sent a very stern e-mail company wide with the
Subject: I love you
OUTSTANDING!
-Alex
-Original Message-
From: Kat Aylward [mailto:messagel...@gmail.com]
Sent: Friday, September 10, 2010 1:40 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
Little story...
I was new at a Silicon Valley startup... I'd been there maybe 5 months
If anyone needs a copy
[cid:image001.png@01CB50FF.298E1110]
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, September 10, 2010 2:09 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
We exmerged the email out of the mailboxes to prevent that...
On Fri, Sep 10, 2010
:* Roger Wright [mailto:rhw...@gmail.com]
*Sent:* Friday, September 10, 2010 1:13 PM
*To:* MS-Exchange Admin Issues
*Subject:* Re: Possible Email Virus
In our case the link was:
http:// members dot multimania dot co dot uk
Roger Wright
___
When it's GOOD there ain't nothin' like
Issues
Subject: Re: Possible Email Virus
I still remember that day very well... Lot's of queue cleaning that day...
On Fri, Sep 10, 2010 at 10:55 AM, Don Andrews don.andr...@safeway.com
wrote:
Haw – first time I experienced that was when the I Love You virus came out.
---
To manage
' Security is an ongoing process, not a one time event ! '
-Original Message-
From: Kat Aylward [mailto:messagel...@gmail.com]
Sent: Friday, September 10, 2010 2:40 PM
To: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
Little story...
---
To manage subscriptions click
: Possible Email Virus
Little story...
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
--
Kat Aylward
---
To manage subscriptions click here
Just caught some - thanks!
Kleciak, Clint D A7IT clint.klec...@cigna.com 9/9/2010 3:37 PM
Reports of an email virus hitting some companies today. It has a link to a .scr
file that looks like a PDF link. When users click it, it begins sending emails
using the GAL or contacts. Not sure of
2:44:10 PM
Subject: Re: Possible Email Virus
Just caught some - thanks!
Kleciak, Clint D A7IT clint.klec...@cigna.com 9/9/2010 3:37 PM
Reports of an email virus hitting some companies today. It has a link to a .scr
file that looks like a PDF link. When users click it, it begins sending
Thank you.
CFee
From: Kleciak, Clint D A7IT [mailto:clint.klec...@cigna.com]
Sent: Thursday, September 09, 2010 3:38 PM
To: MS-Exchange Admin Issues
Subject: Possible Email Virus
Reports of an email virus hitting some companies today. It has a link to a .scr
file that looks like a PDF link.
-Exchange Admin Issues
Subject: Re: Possible Email Virus
Yep it hit here - put a filter on the inbox to delete anything with that
subject
while the mail / security team are working it.
- Original Message
From: Charles A Ransom rans...@gao.gov
To: MS-Exchange Admin Issues exchangelist
Using Forefront, and message tracking logs don't find anything with that
subject line all day.
From: Doug Rooney [mailto:d...@sonomatilemakers.com]
Sent: Thursday, September 09, 2010 4:10 PM
To: MS-Exchange Admin Issues
Subject: RE: Possible Email Virus
I guess I am happy with what I pay
For those on ex2k7 or ex2k10-
Exchange 2010
*New-TransportRule* *-Name* 'Here you have' *-Comments* '' *-Priority* '0' *
-Enabled* $true *-SubjectContainsWords* 'here you have' *-DeleteMessage*
$true
Exchange 2007
$action = *Get-TransportRuleAction* DeleteMessage
$condition =
Is there a E2k3 version of this rule?
On Sep 9, 2010, at 2:57 PM, Tom Kern tpk...@gmail.com wrote:
For those on ex2k7 or ex2k10-
Exchange 2010
New-TransportRule -Name 'Here you have' -Comments '' -Priority '0' -Enabled
$true -SubjectContainsWords 'here you have' -DeleteMessage
09, 2010 6:05 PM
To: MS-Exchange Admin Issues
Cc: MS-Exchange Admin Issues
Subject: Re: Possible Email Virus
Is there a E2k3 version of this rule?
On Sep 9, 2010, at 2:57 PM, Tom Kern
tpk...@gmail.commailto:tpk...@gmail.com wrote:
For those on ex2k7 or ex2k10-
Exchange 2010
New-TransportRule
That's what I did for our company...
On Thu, Sep 9, 2010 at 2:57 PM, Tom Kern tpk...@gmail.com wrote:
For those on ex2k7 or ex2k10-
Exchange 2010
*New-TransportRule* *-Name* 'Here you have' *-Comments* '' *-Priority* '0'
*-Enabled* $true *-SubjectContainsWords* 'here you have'
34 matches
Mail list logo
