RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Marc Catuogno
Um, no making fun here - I opened it. I thought it was just spam someone forwarded it to my spam account. I didn't find the Trojan downloader on my PC. I'm ASSUMING that you have to hit the check prices macro button as no macro seemed to auto-execute... I just downloaded the intelligent

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
: Tuesday, June 27, 2006 7:04 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus John, Not to say that this wouldn't be something that is nice to have, I can think of dozens of things that are very largely useful on a much more regular basis

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Wednesday, June 28, 2006 6:03 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Um, no making fun here - I opened it. I thought it was just spam someone forwarded it to my spam

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Kami Razvan
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, June 27, 2006 5:48 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Is the word document only named that? John T

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Tuesday, June 27, 2006 3:10 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Robert Grosshandler
Matt - Thanks for keeping track of all of this for the rest of us. Rob -Original Message- David, I'm just wondering about the issue with the invalid characters in the Mail From's that caused massive spam leakage almost a month ago. Is this too supposed to be fixed? I'm also very,

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus John, Not to say that this wouldn't be something that is nice to have, I can think of dozens of things that are very largely useful on a much more regular basis. In fact, the current functionality provides

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus David, I'm just wondering about the issue with the invalid characters in the Mail From's that caused massive spam leakage almost a month ago. Is this too supposed to be fixed? I'm also very

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Ncl Admin
www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Tuesday, June 27, 2006 7:04 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus John, Not to say that this wouldn't

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, June 28, 2006 1:49 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Michael Thomas - Mathbox
to handle viruses and spammers. Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, June 28, 2006 3:08 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Matt

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread John T \(Lists\)
Back to the matter indicated in the subject line, how are others dealing with this? Is F-Prot and AVG and others catching this now? Which AV scanners are indeed catching it? Now for the bigger question: How do we combat this and future such versions without outright blocking of the file

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus David, The CRLF thing doesn't affect me since I have my own solution, however for those that use Subject tagging, adding another test won't help unless they decide to just simply delete

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Scott Fisher
. But I'm not looking forward to hand correcting 120 of these a month. - Original Message - From: David Barker [EMAIL PROTECTED] To: declude.virus@declude.com Sent: Wednesday, June 28, 2006 2:07 PM Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Matt, The CRLF

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Back to the matter indicated in the subject line, how are others dealing with this? Is F-Prot and AVG and others catching this now? Which AV scanners are indeed catching it? Now for the bigger

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, June 28, 2006 2:14 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus I haven't seen any yet; I don't know if F-Prot is catching them. From the published

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread John T \(Lists\)
2:26 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Importance: Low I don't know where that character in front of my From sentence came from. The first character on that line should have been an F. It must be some kind of weird

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Darrell \([EMAIL PROTECTED])
Mcafee is catching these Trojan.Myno on my systems. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Darrell \([EMAIL PROTECTED])
Actually, it is CLAMAV catching it. Not sure about McAfee as I stop on first virus. F-Prot is def. not catching it though. Darrell Darrell ([EMAIL PROTECTED]) writes: Mcafee is catching these Trojan.Myno on my systems. Darrell --- Check out

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Colbeck, Andrew
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, June 27, 2006 12:08 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Actually, it is CLAMAV catching it. Not sure about McAfee as I stop

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread John T \(Lists\)
Is the word document only named that? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Tuesday, June 27, 2006 11:32 AM To: declude.virus@declude.com Subject: [Declude.Virus] New

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Markus Gufler
: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Is the word document only named that? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Tuesday, June 27, 2006

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread John T \(Lists\)
: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus As I know yes but BANNAME my_notebook.doc wouldn't work for files within zip-archives. Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Colbeck, Andrew
:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, June 27, 2006 3:38 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Importance: High I know. :( Declude, this is a feature who's time has come. John T eServices

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Matt
y, June 27, 2006 11:48 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Is the word document only named that? John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTE