You need to get the 4174 DATs to catch it and of course McAfee FTP servers
are hammered!
Use ftp:/ftpeur.nai.com and manually download the sdat-4174.zip. You will
then have to manually apply it to your Exchange server, witch is major PITA
by itself.
See in  FAQs on www.mcafeeb2b.com for "Why are all attachments being
blocked?" question on instructions how to do it.
Feel free to email me with any questions.

Dimitri


-----Original Message-----
From: Eric Brouwer [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 3:33 PM
To: MS-Exchange Admin Issues
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm


Groupsuck REALLY sucks...

Even though I already had the latest dat installed, and all my services are
running, two instances of this virus made it through.  Thankfully I don't
trust GS, and I sent out a warning and my users actually read it, and acted
on it.

Any idea why GS might not be catching them?  Everything looks like it's set
up properly.  I caught all the Badtrans viruses last week.

-----Original Message-----
From: Dennis Atherton [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 3:27 PM
To: MS-Exchange Admin Issues
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm


Download and save the file sarcx86.exe, and then execute it on the system to
be updated.

-----Original Message-----
From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 11:50 AM
To: MS-Exchange Admin Issues
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm



Which file do you grab from there???????? 

-----Original Message----- 
From: Philip Youngworth [ mailto:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> ] 
Sent: Tuesday, December 04, 2001 1:37 PM 
To: MS-Exchange Admin Issues 
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 


You can get the sarc update from their ftp server. 

ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/norto
<ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/nort
o>  
n_antivirus/specdef 

You should be able to grab the sarc there for it. 

-----Original Message----- 
From: Cicerrella, Steve [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
] 
Sent: Tuesday, December 04, 2001 2:24 PM 
To: MS-Exchange Admin Issues 
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 


Seeing this one already.    I have not found a patch for "Norton for 
Exchange" yet.    Already sent a broadcast to the users pleading with them 
to use some common sense and explicitly telling them NOT to open that one. 
I wonder how many of them will open it anyway..   ;) 

Steve 



-----Original Message----- 
From: Briggs, Bruce [ mailto:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> ] 
Sent: Tuesday, December 04, 2001 10:41 AM 
To: MS-Exchange Admin Issues 
Subject: *** Warning *** New Virus - W32.goner.a@mm 


Just in case you are not aware yet, there is a new virus out there. Lots of
incoming infected mail here, right now. We got an automatic update this
morning for Antigen which is protecting us. Hope the same for you.

http:[EMAIL PROTECTED]
<http:[EMAIL PROTECTED]
>  

Bruce Briggs 
System Administration 
State University of NY 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
<http://www.sunbelt-software.com/exchange_list_charter.htm>  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
<http://www.sunbelt-software.com/exchange_list_charter.htm>  


*********************************************************** 
The information transmitted in this email is intended only for the person(s)
or entity to which it is addressed and may contain confidential and/or
privileged material.  Any review, 

retransmission, dissemination or other use of, or taking of 
any action in reliance upon, this information by persons or entities other
than the intended recipient is prohibited. If you received this email in
error, please contact the sender and permanently delete the email from any
computer.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
<http://www.sunbelt-software.com/exchange_list_charter.htm>  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

Reply via email to