Seriously... forget relying on updates... get Antigen... configure all the attachment extentions.
.cmd, .pif, .scr, .com, .bat, .vbs, .sh, .exe, etc, etc... load em up... sleep easier. -----Original Message----- From: Briggs, Bruce [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 4:59 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm As William says, You're no fun. Bruce P.S. But you are safer than many. -----Original Message----- From: Arnold, Jamie [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 4:55 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Hmmmmmmmmm...I've had .scr in my extension filter list for over a year. Perhaps some of you should add it also? Jamie Arnold "Using Antigen since 1999" -----Original Message----- From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 3:48 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm You need to get the 4174 DATs to catch it and of course McAfee FTP servers are hammered! Use ftp:/ftpeur.nai.com and manually download the sdat-4174.zip. You will then have to manually apply it to your Exchange server, witch is major PITA by itself. See in FAQs on www.mcafeeb2b.com for "Why are all attachments being blocked?" question on instructions how to do it. Feel free to email me with any questions. Dimitri -----Original Message----- From: Eric Brouwer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Groupsuck REALLY sucks... Even though I already had the latest dat installed, and all my services are running, two instances of this virus made it through. Thankfully I don't trust GS, and I sent out a warning and my users actually read it, and acted on it. Any idea why GS might not be catching them? Everything looks like it's set up properly. I caught all the Badtrans viruses last week. -----Original Message----- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 3:27 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Download and save the file sarcx86.exe, and then execute it on the system to be updated. -----Original Message----- From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 11:50 AM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Which file do you grab from there???????? -----Original Message----- From: Philip Youngworth [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 1:37 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm You can get the sarc update from their ftp server. ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/n orto <ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/ nort o> n_antivirus/specdef You should be able to grab the sarc there for it. -----Original Message----- From: Cicerrella, Steve [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 2:24 PM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm Seeing this one already. I have not found a patch for "Norton for Exchange" yet. Already sent a broadcast to the users pleading with them to use some common sense and explicitly telling them NOT to open that one. I wonder how many of them will open it anyway.. ;) Steve -----Original Message----- From: Briggs, Bruce [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Tuesday, December 04, 2001 10:41 AM To: MS-Exchange Admin Issues Subject: *** Warning *** New Virus - W32.goner.a@mm Just in case you are not aware yet, there is a new virus out there. Lots of incoming infected mail here, right now. We got an automatic update this morning for Antigen which is protecting us. Hope the same for you. http:[EMAIL PROTECTED] tml <http://securityresponse.symantec.com/avcenter/venc/data/w32.goner.a@mm. html > Bruce Briggs System Administration State University of NY List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> *********************************************************** The information transmitted in this email is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this email in error, please contact the sender and permanently delete the email from any computer. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm <http://www.sunbelt-software.com/exchange_list_charter.htm> List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
