Martins List configured in  Mimesweeper running sophos, f-secure  and trend on the 
desktop/server. Plus scanning this and the sunblet lists twice daily.
Me paranoid... nah!

>>> [EMAIL PROTECTED] 28/01/2004 9:17:34 a.m. >>>
How is everyone blocking the viruses?  What products/methods do you use?

-----Original Message-----
From: Alverson, Tom [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 27, 2004 3:13 PM
To: Exchange Discussions
Subject: RE: Another brand new virus (not novarg) not being detected


I just submitted it to Symantec for analysis.  I had to enable that function
in the system center before it would let me submit it. 

-----Original Message-----
From: Alverson, Tom [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 27, 2004 2:33 PM
To: Exchange Discussions
Subject: Another brand new virus (not novarg) not being detected

I just blocked another new virus at our gateway that Symantec does not yet
detect.  This one is about twice the size of novarg and the executable is
totally different.  Here is a snippet of the beginning of it.  

Tom


SUBJECT: He played what seemed.
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_00A5_015D9846.9E9846A0"
Content-Transfer-Encoding: 7bit
To: undisclosed-recipients:;
X-Envfrom: [EMAIL PROTECTED] 
X-Xmap: EXE - Executable attachment detected
X-Bayes: 0.000000 0.442441

This is a multi-part message in MIME format.

------=_NextPart_000_00A5_015D9846.9E9846A0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

The wedding started late(half hour after the original time set of
7:PM)..most people sitting in the "cathedral room" of the Antiquated(old)
ICE House of Phoenix were talking as various elements of people were coming
in to the room, some also went outside, then came back before the ceremony
began. Over 100 people seem to be in the chairs provided about 5060 on each
side. I somewhat knew this Marriage ceremony was going to be special because
a lot of the members of the audience were in  "costumes"(not suits and
summer style dresses) so it was  not unlike going to a Halloween party let
alone a marriage event and seeing these costumes.
------=_NextPart_000_00A5_015D9846.9E9846A0
Content-Type: application/octet-stream; name="minutesnof.bat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="minutesnof.bat"

TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAgAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJAAAAAAAAABQRQAATAEFABhA4jMAAAAA1cMAAOAADwELAQUAAC4AAAA8AAAAAAAAQBgA


Etc. etc. etc.....

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm 
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang 
=english
To unsubscribe:         mailto:[EMAIL PROTECTED] 
Exchange List admin:    [EMAIL PROTECTED] 
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm 
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang 
=english
To unsubscribe:         mailto:[EMAIL PROTECTED] 
Exchange List admin:    [EMAIL PROTECTED] 
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm 
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english 
To unsubscribe:         mailto:[EMAIL PROTECTED] 
Exchange List admin:    [EMAIL PROTECTED] 
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.




**********************************************************************
         Northland State of the Environment Report 2002
                     now online at  www.nrc.govt.nz
**********************************************************************
NORTHLAND REGIONAL COUNCIL

This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
[EMAIL PROTECTED]
**********************************************************************


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to