At 13:04 12-07-2001, Luciano Giacchetta wrote: have you tried to block all (.scr) files at the gateway level? Do you have any product to do this like NAV GW, NAV Exchange and so on?
Take a look at this document and verify all the steps to clean this virus manually: http:[EMAIL PROTECTED] hope this helps Marco >The Mail Server run over Windows NT 4.0, The heuristics are at Maximun level >and are activate the Bloodhound. >I read that the virus change the File size and file name, or anybody >refoward the virus modificate when the antivirus detected. > > >David > >----- Original Message ----- >From: Ziggy <[EMAIL PROTECTED]> >To: Luciano Giacchetta <[EMAIL PROTECTED]>; ><[EMAIL PROTECTED]> >Sent: Friday, December 07, 2001 5:57 AM >Subject: RE: W32.Goner.A@mm > > > > > > have you tried stoping it at the mail server level with filters ..what OS > > are you running??? > > > > -----Original Message----- > > From: Luciano Giacchetta [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, December 05, 2001 9:40 PM > > To: [EMAIL PROTECTED] > > Subject: W32.Goner.A@mm > > > > > > Hi, > > My NAV, Norton Antivirus Corporative, has been stop this worm in all day, > > since I pach it with the last Def. > > Now, I look that the worm itīs go over my NAV. Itīs a Polymorphhi???? > > How stop this?? > > > > Thanks > > > > David Giacchetta > > System Administrator > > > > > > > > > > > > > > _________________________________________________________ Do You Yahoo!? > > Get your free @yahoo.com address at http://mail.yahoo.com > > > >_________________________________________________________ >Do You Yahoo!? >Get your free @yahoo.com address at http://mail.yahoo.com ___ Marco Bicca | Security Engineer | [EMAIL PROTECTED] | 55 11 9963-4819 LICQ: 3198441 | Yahoo: TwilightDrummer | MSNM: [EMAIL PROTECTED] "Remember: security is not a solution; it is a way of life" "The box said 'Windows NT or better', so I installed linux..........." PGP: http://www.it-cowboyz.com/pgp/mbicca.asc
