RE: [Declude.Virus] JS/illWill

[Robert Grosshandler]

Problem is, I want to get "good" zipped exe's.   Oh well.  Until the AV programs start catching it, I've made our e-mail less useful by blocking any zips with exe's in them. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, August 09, 2004 12:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] JS/illWill Declude is indeed stopping it if configured correctly. That is how I am stopping them.   BANZIPEXTS   BANEXT EXE   John Tolmachoff Engineer/Consultant/Owner eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Monday, August 09, 2004 10:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] JS/illWill   We're seeing it too.   McAfee on desktop catching as a "trojan".  AVG and F-Prot not catching it yet. Declude not stopping, either.   newprice.zip is the attachment name.       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Monday, August 09, 2004 11:23 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] JS/illWill I've seen several JS/IllWill messages in the past 20 minutes on our system   Looking at http://vil.nai.com/vil/content/v_99242.htm it's an old virus (2001) and I can't remember another one in the past. But now I can see them comming from all different IP-Adresses.   Mailfrom looks like real existing adresses but are definitively forged.   Markus