Hey Matt. Nimda is a virus Anthrax is a bacteria. InnoculateIT is more like a fungal infection :)
-----Original Message----- From: Monteleone-Haught Matt - Millville [mailto:[EMAIL PROTECTED]] Sent: Monday, October 22, 2001 9:40 AM To: Exchange Discussions Subject: RE: Infect file slips thru Trend Antivirus I had a simialar outbreak of a virus, it turned out that the infected computer had gotten the infected email through his personal excite mailbox. Unfortunately the virus used his default mail client to send it self out. The virus wasn't caught on the original PC[1], but was caught by ScanMail when the virus tried sending itself to everyone. I have also read that ScanMail will miss viruses if the server is under a load. [1] We unfortunately still use InnoculateIT on the desktops. Innoculate couldn't catch a virus if it were sprinkled with anthrax powder. >>>-----Original Message----- >>>From: Chinnery Paul [mailto:[EMAIL PROTECTED]] >>>Sent: Monday, October 22, 2001 10:27 AM >>>To: Exchange Discussions >>>Subject: Infect file slips thru Trend Antivirus >>> >>> >>>Today, we had a virus outbreak with the "homepage" virus >>>(released in the wild 5/9). We use TrendMicro's AV on our >>>Exchange server (5.5) along with the desktop version. >>> >>>From the infected computer, I received 9 emails of the >>>virus. With the first 4 emails, Trend caught and stripped >>>the attachment. However, the subsequent 5 emails had the >>>attachment with them. (And, btw, I also have it set up to >>>block exe, vbs, bat and cmd files.) >>> >>>Even more, when two more computers got infected opening the >>>attachment from the original pc, Trend didn't catch those >>>subsequent emails at all. >>> >>>I understand, of course, Ed's rule of thumb about >>>technological solutions but I'm mostly just curious (and >>>concerned to a degree) why our AV didn't protect us that much. >>> >>>I've contacted Trend support and asked them why this >>>happened but I'm simply throwing it out here for comment. I >>>just find it rather perplexing that Trend only catches half >>>of them. >>> >>>Paul Chinnery >>>Network Administrator >>>Mem Med Ctr >>>_________________________________________________________________ >>>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >>>Archives: http://www.swynk.com/sitesearch/search.asp >>>To unsubscribe: mailto:[EMAIL PROTECTED] >>>Exchange List admin: [EMAIL PROTECTED] >>> >>>_________________________________________________________________ >>>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >>>Archives: http://www.swynk.com/sitesearch/search.asp >>>To unsubscribe: mailto:[EMAIL PROTECTED] >>>Exchange List admin: [EMAIL PROTECTED] >>> _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
