As far as I've seen on Antigen, it will.

Antigen filters based on the last extension (i.e. the rightmost 3 chars
after the last period) as far as I've seen, and in practice my and my
clients' Antigens pick off attachments with the double extensions w/no
problem when we simply filter for *.PIF, *.SCR, *.VB? etc. 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, December 04, 2001 2:01 PM
To: ExchangeList@swynk
Subject: RE: New Virus outbreak


Won't filtering *.vbs also filter *.txt.vbs?

Bill Lambert
Endoxy Healthcare
847-941-9206
[EMAIL PROTECTED]
 


-----Original Message-----
From: Murphy, Brian [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 1:51 PM
To: Exchange Discussions
Subject: RE: New Virus outbreak


I pretty much filter everything.  One of the good aspects of Antigen for
Sybari is that I can "quarantine" certain items and "approve" delivery
later
if I choose.  For example, I filter all *.exe files but some *.exe files
might serve a legitimate purpose (very rarely happens..but it does).
User
will notify me before or after the file is sent.  If I deem the
executable
worthy then I simply forward it to the recipient using the Antigen
interface.

Even though I'm filtering just about every extension known to man I
still
have to watch out for these double extensions.....(Example: *.txt.vbs,,
*.txt.exe,, *.txt.lnk).   ETC.

The next version of Antigen will allow content filtering.  This helps
but
can cause other problems so I will use it sparingly.



-----Original Message-----
From: Murphy, Brian [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 1:46 PM
To: Exchange Discussions
Subject: RE: New Virus outbreak


Not unless it's Java Script.

-----Original Message-----
From: Tea, Justin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 1:25 PM
To: Exchange Discussions
Subject: RE: New Virus outbreak


Isn't .js created by Office product when sending document from within
the
productivity suite?

-----Original Message-----
From: Murphy, Brian [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 9:10 AM
To: Exchange Discussions
Subject: RE: New Virus outbreak


I am.  And, .vbs, .js, .htm, .html, .txt.vbs,
etc.............................................

My users love it.

-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 11:05 AM
To: Exchange Discussions
Subject: RE: New Virus outbreak


We are all blocking .SCR files anyway...right kids?

-----Original Message-----
From: Hurst, Paul [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 8:15 AM
To: Exchange Discussions
Subject: New Virus outbreak


Please note that there is a new Email virus out with an attachment
Gone.scr


Cheers

Paul

Standards are like toothbrushes,
everybody agrees you should have one,
but no one wants to use yours



**********************************************************************
The information contained in this message or any of its attachments may
be
confidential and is intended for the exclusive use of the addressee(s).
Any
disclosure, reproduction, distribution or other dissemination or use of
this
communication is strictly prohibited without the express permission of
the
sender. The views expressed in this email are those of the individual
and
not necessarily those of Sony or Sony affiliated companies. Sony email
is
for business use only. 

This email and any response may be monitored by Sony UK.
(05)
**********************************************************************


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to