OK, I've figured out the confusion. You were talking as a user about a message that came into your own mailbox, and it raised your suspicion. I was assuming that you were talking as an admin about infected messages that had penetrated your email system, away from your immediate scrutiny.
So, no need to give you a bon voyage? :) --- Jean-Paul Natola <[EMAIL PROTECTED]> wrote: > Plus the fact I knew I had not purchased any airline > tickets lately lol- > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Albert > Duro > Sent: Monday, August 18, 2008 12:13 PM > To: Exchange Discussions > Subject: RE: virus > > yes, but how did you know that the single zipped > file > was a threat? You said that your AV failed you on > this one so *something* must have alerted you to it. > > I was just asking what that something was. > And the reason I asked was because I also have > Symantec, and I wanted some clue how to look for > something that my AV had supposedly missed. > > --- Jean-Paul Natola <[EMAIL PROTECTED]> > wrote: > > > Well - a single zipped file- named ticket.exe , > > not too hard to figure that > > one out- then I uploaded to virustotal.com and it > > was confirmed > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] > > On Behalf Of Albert > > Duro > > Sent: Thursday, August 14, 2008 10:26 PM > > To: Exchange Discussions > > Subject: Re: virus > > > > How did you detect it? > > > > ----- Original Message ----- > > From: "Jean-Paul Natola" > > <[EMAIL PROTECTED]> > > To: "Exchange Discussions" > > <[email protected]> > > Sent: Thursday, August 14, 2008 1:03 PM > > Subject: virus > > > > > > Just a heads up > > > > Ticket.exe which comes zipped as ticket. zip was > > not detected by clamav or > > symantec > > > > > > > > > > > > > > > > > > > > > > > > Jean-Paul > > > > > > > _________________________________________________________________ > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: > > > http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to > > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us > > at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have > been > > contacted with. > > > > > > > _________________________________________________________________ > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: > > > http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to > > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us > > at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have > been > > contacted with. > > > > > > > _________________________________________________________________ > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: > > > http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to > > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us > > at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have > been > > contacted with. > > > > > > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us > at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been > contacted with. > > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: > http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us > at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been > contacted with. > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
