Well what clued me in was the mere fact that it was a single file- why zip a single file- and an executable at - plus the fact that many have been slipping by lately -
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Albert Duro Sent: Monday, August 18, 2008 12:13 PM To: Exchange Discussions Subject: RE: virus yes, but how did you know that the single zipped file was a threat? You said that your AV failed you on this one so *something* must have alerted you to it. I was just asking what that something was. And the reason I asked was because I also have Symantec, and I wanted some clue how to look for something that my AV had supposedly missed. --- Jean-Paul Natola <[EMAIL PROTECTED]> wrote: > Well - a single zipped file- named ticket.exe , > not too hard to figure that > one out- then I uploaded to virustotal.com and it > was confirmed > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Albert > Duro > Sent: Thursday, August 14, 2008 10:26 PM > To: Exchange Discussions > Subject: Re: virus > > How did you detect it? > > ----- Original Message ----- > From: "Jean-Paul Natola" > <[EMAIL PROTECTED]> > To: "Exchange Discussions" > <[email protected]> > Sent: Thursday, August 14, 2008 1:03 PM > Subject: virus > > > Just a heads up > > Ticket.exe which comes zipped as ticket. zip was > not detected by clamav or > symantec > > > > > > > > > > > > Jean-Paul > > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us > at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been > contacted with. > > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us > at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been > contacted with. > > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us > at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been > contacted with. > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
