I haven't seen any yet; I don't know if F-Prot is catching them. >From the published information at the antivirus vendors' sites, I'm using the BANNAME feature, e.g.
BANNAME My_Notebook.doc And further, I catch most of the viruses as junkmail because they typically come from zombie machines, so they're heavily IP4R listed. I do use a SKIPATTACH filter (which I've previously shared on the list, so it's in the web archive if anyone wants it) and I've lowered the weight of that. I don't think this virus is spreading well, it's not receiving much attention, and Trend Micro's statistics graph is flatlined. I think if your mailserver is getting them, you'll continue to get them, otherwise, it's not very likely. Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of John T (Lists) > Sent: Wednesday, June 28, 2006 1:06 PM > To: [email protected] > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > Back to the matter indicated in the subject line, how are > others dealing with this? > > Is F-Prot and AVG and others catching this now? > > Which AV scanners are indeed catching it? > > Now for the bigger question: How do we combat this and future > such versions without outright blocking of the file > extension? We all know that relaying on users to not open > attachments is problematic. > > John T > eServices For You > > "Seek, and ye shall find!" > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
