f-prot scanner caught 8 messages yesterday with the w32/SoBig.A@mm
virus that Mcafee (NAI) passed. Mcafee dat is at 4241 released 1/8.
I scanned the smd file with NAV and it also reported soBig.
Reviewing NAI for information on w32/soBig.A
http://vil.nai.com/vil/content/v_99950.htm
indicates
John,
You make a good point. But let me say
that I do have Banext scr in the config file. So that add to the
question why did the message go through,
Lenny
Bauman
- Original Message -
From:
John Tolmachoff
To: [EMAIL PROTECTED]
Sent: Friday,
Scott,
I am running v1.53. I will look into
getting the .mbx file from the billing managers mail box if I can.
Lenny
Bauman
- Original Message -
From:
R. Scott
Perry
To: [EMAIL PROTECTED]
Sent: Friday, January 10, 2003 6:38
PM
Subject: Re:
i had the same problem with lentin while running
declude 1.61
upgrading to 1.65 fixed the problem
- Original Message -
From:
Lenny Bauman
To: [EMAIL PROTECTED]
Sent: Saturday, January 11, 2003 3:57
PM
Subject: Re: [Declude.Virus] Lentin virus
passing declude
Scott,
I have the .mbx file with the
infected mail in it. What address do you me to send it to.
Lenny Bauman
- Original Message -
From:
R. Scott
Perry
To: [EMAIL PROTECTED]
Sent: Saturday, January 11, 2003 11:49
AM
Subject: Re: [Declude.Virus] Lentin
I used Eudora, and discovered that on my unfiltered account, we were
passing some of these problem messages on. When they did, they
occasionally caused problems on the receivers end. So I quit using
Eudora and went back to Outlook.
Kendra Customer Support
http://www.kendra.com/support
[EMAIL
NAI just sent me an extra.dat but I had to request it. After
installation of the extra.dat the Mcafee scanner is now detecting this
virus:
Scanner 2: Virus= the W32/Sobig@MM (ED) virus !!!
Attachment=Sample.pif [0] I
Getting several of these now.
Based on what I am seeing the treat
I have the .mbx file with the infected mail in it. What address do
you me to send it to.
If you could send it to [EMAIL PROTECTED], that would be great.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
Scott
I have sent
the message with infected .mbxas you have asked.
Lenny
Bauman
- Original Message -
From:
R. Scott
Perry
To: [EMAIL PROTECTED]
Sent: Saturday, January 11, 2003 1:46
PM
Subject: Re: [Declude.Virus] Lentin virus
passing declude and