PROTECTED]
On
Behalf Of Pete McNeil
Sent: Wednesday, October 05, 2005 8:41 PM
To: sniffer@sortmonster.com
Subject: [sniffer] New virus...
Importance: High
Hello sniffer,
Hello folks... watch out for a new virus email with an attachment
named pword _ change . zip - extra spaces added to skip
: Thursday, October 06, 2005 12:02 AM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] New virus...
No need to block zips, with Declude just add BANZIPEXTS
ON to your
virus.cfg file since the payload is an exe within the zip and
since we are all already banning executable files, correct
That's only in Virus Pro, right? I don't think BANZIPEXTS is available in
Standard or Lite.
Darin.
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: sniffer@SortMonster.com
Sent: Thursday, October 06, 2005 3:01 AM
Subject: RE: [sniffer] New virus...
No need to block
be very careful.
-Joe
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: sniffer@SortMonster.com
Sent: Thursday, October 06, 2005 2:01 AM
Subject: RE: [sniffer] New virus...
No need to block zips, with Declude just add BANZIPEXTS ON to your
virus.cfg file since the payload
Hello sniffer,
Hello folks... watch out for a new virus email with an attachment
named pword _ change . zip - extra spaces added to skip filters
;-)
We're adding some SNF rules to catch it. No word about it on virus
lists or scanner services yet (that I can see).
You may want to
