I don't know where that ">" character in front of my From sentence came from. The first character on that line should have been an "F".
It must be some kind of weird auto-quoting software; that character is not in the email that I sent. Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Colbeck, Andrew > Sent: Wednesday, June 28, 2006 2:14 PM > To: [email protected] > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > I haven't seen any yet; I don't know if F-Prot is catching them. > > >From the published information at the antivirus vendors' sites, I'm > using the BANNAME feature, e.g. > > BANNAME My_Notebook.doc > > And further, I catch most of the viruses as junkmail because > they typically come from zombie machines, so they're heavily > IP4R listed. > > I do use a SKIPATTACH filter (which I've previously shared on > the list, so it's in the web archive if anyone wants it) and > I've lowered the weight of that. > > I don't think this virus is spreading well, it's not > receiving much attention, and Trend Micro's statistics graph > is flatlined. I think if your mailserver is getting them, > you'll continue to get them, otherwise, it's not very likely. > > Andrew 8) > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > > John T (Lists) > > Sent: Wednesday, June 28, 2006 1:06 PM > > To: [email protected] > > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > > Macro-Virus > > > > Back to the matter indicated in the subject line, how are others > > dealing with this? > > > > Is F-Prot and AVG and others catching this now? > > > > Which AV scanners are indeed catching it? > > > > Now for the bigger question: How do we combat this and future such > > versions without outright blocking of the file extension? > We all know > > that relaying on users to not open attachments is problematic. > > > > John T > > eServices For You > > > > "Seek, and ye shall find!" > > > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
