What you should do is deny .scr, .js, etc... as attachment types, then the viruses won't get through.. I have my firewall block all known executable file types...
Thanks! Joe Irvine http://www.tbopayroll.com/ 609-597-1155 -----Original Message----- From: Eric Brouwer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Groupsuck REALLY sucks... Even though I already had the latest dat installed, and all my services are running, two instances of this virus made it through. Thankfully I don't trust GS, and I sent out a warning and my users actually read it, and acted on it. Any idea why GS might not be catching them? Everything looks like it's set up properly. I caught all the Badtrans viruses last week. -----Original Message----- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 3:27 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Download and save the file sarcx86.exe, and then execute it on the system to be updated. -----Original Message----- From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 11:50 AM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Which file do you grab from there???????? -----Original Message----- From: Philip Youngworth [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 1:37 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm You can get the sarc update from their ftp server. ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/n orto <ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/ nort o> n_antivirus/specdef You should be able to grab the sarc there for it. -----Original Message----- From: Cicerrella, Steve [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 2:24 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Seeing this one already. I have not found a patch for "Norton for Exchange" yet. Already sent a broadcast to the users pleading with them to use some common sense and explicitly telling them NOT to open that one. I wonder how many of them will open it anyway.. ;) Steve -----Original Message----- From: Briggs, Bruce [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 10:41 AM To: MS-Exchange Admin Issues Subject: *** Warning *** New Virus - W32.goner.a@mm Just in case you are not aware yet, there is a new virus out there. Lots of incoming infected mail here, right now. We got an automatic update this morning for Antigen which is protecting us. Hope the same for you. http:[EMAIL PROTECTED] tml <http://securityresponse.symantec.com/avcenter/venc/data/w32.goner.a@mm. html > Bruce Briggs System Administration State University of NY List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> *********************************************************** The information transmitted in this email is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this email in error, please contact the sender and permanently delete the email from any computer. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
