It clearly isn't a virus, but it might not be stretching things too much to call it a worm. It's really the delivery method that's different, along with the attempt to make it vaguely legal.
-Peter -----Original Message----- From: Atkinson, Daniel [mailto:datkinson@;sevenww.co.uk] Sent: Tuesday, November 12, 2002 7:55 To: Exchange Discussions Subject: RE: Virus heads up You need to configure trend e-manager (if you have it) to block it with a rule that detects something in the subject line or message body. This is not a virus, it is more of a confidence trick, although NAV is now detecting the software that installs if you follow the link. As usual, this is causing much confusion amongst users... > > -----Original Message----- > > From: Young, Phil [mailto:phil.young@;wcom.co.uk] > > Sent: Tuesday, November 12, 2002 8:55 AM > > To: Exchange Discussions > > > > Hi, > > Has anyone successfully cleaned this virus using Trend Scanmail. We are > > running Trend 3.52 in AVAPI mode with pattern 382 and I am yet to see it > > successfully clean the virus. Are there any specific settings I should > set > > in Scanmail? > > Thanks in advance. > > Phil > > > > -----Original Message----- > > From: Darcy Adams [mailto:Darcy.Adams@;gettyimages.com] > > Sent: 11 November 2002 14:48 > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > Well, our Help Desk staff has proven that it *is* possible to ignore me. > > But bad things tend to happen every time they do. Like users infecting > > themselves with a new virus. > > > > Darcy > > > > -----Original Message----- > > From: William Lefkovics, WLKMMAS [mailto:william@;techsanctuary.org] > > Sent: Sunday, November 10, 2002 4:08 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > > > I don't believe you. > > > > You are impossible to ignore. > > > > I think these are also associated... > > www.cool-downloads.com > > www.cool-downloads.net > > www.friend-greetings.com > > www.friend-greeting.com > > www.friend-greetings.net > > www.friend-greeting.net > > www.friend-cards.net > > > > William > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:bounce-exchange-104116@;ls.swynk.com] On Behalf Of Darcy Adams > > Sent: Friday, November 08, 2002 9:24 AM > > To: Exchange Discussions > > > > I'm still going to forward this to our Help Desk. I warned them, and > > our security and network teams, about it when it first came around. A > > few days later our Security team sent out a notice that it had made it > > in and infected some desktops. > > > > HELLOOO!! Desktop support - I SENT YOU the FRIGGIN NOTICE days ago. > > Apparently they ignored the warning. > > > > Darcy > > > > -----Original Message----- > > From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] > > Sent: Friday, November 08, 2002 9:09 AM > > To: Exchange Discussions > > Subject: RE: Virus heads up > > > > > > That's not *technically* a virus, but its been around for close to a > > month > > now. > > > > It says in the EULA-that-noone-ever-reads that it will send messages to > > all > > your contacts. > > > > ------------------------------------------------------ > > Roger D. Seielstad - MCSE > > Sr. Systems Administrator > > Inovis - Formerly Harbinger and Extricity > > Atlanta, GA > > > > > > > -----Original Message----- > > > From: Couch, Nate [mailto:nate.couch@;eds.com] > > > Sent: Friday, November 08, 2002 11:59 AM > > > To: Exchange Discussions > > > Subject: Virus heads up > > > > > > > > > Just to let you all know one of our customer got hit with the > > > Friend-Greeting virus a little bit ago. From what I have > > > learned Trend is > > > the only one talking about this now and are calling it FRIENDGRT.B. > > > > > > The actions we are taking are blocking the following domain > > > at the firewall > > > > > http://www.Friend-Greetings.com > > > > Hope this helps. > > > > Cheers. > > > > Nate Couch > > EDS Messaging > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > > > > > ======================================================= > > This email and its contents are confidential. If you > > are not the intended recipient, please do not disclose > > or use the information within this email or its > > attachments. If you have received this email in error, > > please delete it immediately. Thank you. > > ======================================================= > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > > > > > ======================================================= > > This email and its contents are confidential. If you > > are not the intended recipient, please do not disclose > > or use the information within this email or its > > attachments. If you have received this email in error, > > please delete it immediately. Thank you. > > ======================================================= > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin: [EMAIL PROTECTED] ______________________________________________ This message is private or privileged. If you are not the person for whom this message is intended, please delete it and notify me immediately, and please do not copy or send this message to anyone else. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin: [EMAIL PROTECTED]
