I seem to be living on Symantec beta defs lately. 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Nold
Sent: Monday, March 01, 2004 1:48 PM
To: Exchange Discussions
Subject: RE: [EMAIL PROTECTED]

ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/no
rton_antivirus/beta

download the vd18c214.xdb file and update your defs from there.

For info on how to do that:
http://service1.symantec.com/support/ent-security.nsf/docid/200210301257
1948

See "Copying an .xdb file"

Hope that helps.

-----Original Message-----
From: Gregory Householder [mailto:[EMAIL PROTECTED]
Sent: Monday, March 01, 2004 1:43 PM
To: Exchange Discussions
Subject: RE: [EMAIL PROTECTED]

I've seen all the previous ones being detected but I haven't seen this one
yet.  Or course if you look at Symantec's documentation on this strand they
put a disclaimer in there about the revision number. All of mine are
revision 4 but this says it needs revision 17.

Note: Virus definitions of version 60301q (extended version 03/01/2004 rev
17) and later are required to detect this variant.

Any ideas there..  

Greg Householder
[EMAIL PROTECTED]
-----Original Message-----
From: Mark Nold [mailto:[EMAIL PROTECTED]
Sent: Monday, March 01, 2004 4:31 PM
To: Exchange Discussions
Subject: RE: [EMAIL PROTECTED]

Symantec catches it.  

http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
html

As of my last update I have been successfully catching these guys.....

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, March 01, 2004 1:25 PM
To: Exchange Discussions
Subject: [EMAIL PROTECTED]

Looks like another variant.  Trendmicro doesn't have anything on it, neither
does Norton.  McAfee does though.
We just received one in a zip file (I thought Trend examined zips?). 
Either way, we've started blocking zips, too.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to