Hi Keith, Are you limiting your block of *just* the . s c r extensions? The attachments I have seen inbound (via the IDS) are showing . s c r.htm. That *might* be doing it.
rob -----Original Message----- From: Davis, Keith To: [EMAIL PROTECTED] Sent: 12/6/01 9:19 AM Subject: RE: W32.Goner.A@mm I'm seeing the same thing with NAI's Groupshield despite having the latest versions of both the software and dat files. We've even set-up group shield to block '.scr' extensions and it's still managing to come through - Damn clever (NOT!) Any one have any thoughts on how it's able to do this? :-) Keith -----Original Message----- From: Luciano Giacchetta [mailto:[EMAIL PROTECTED]] Sent: 05 December 2001 18:40 To: [EMAIL PROTECTED] Subject: W32.Goner.A@mm Hi, My NAV, Norton Antivirus Corporative, has been stop this worm in all day, since I pach it with the last Def. Now, I look that the worm it�s go over my NAV. It�s a Polymorphhi???? How stop this?? Thanks David Giacchetta System Administrator _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
