I put 691 on my Exchange server on Sat. So far so good, but I haven't seen any of these new virus's yet.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pfefferkorn, Pete (pfeffepe) Sent: Monday, December 01, 2003 8:52 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip Your welcome. Waiting on it myself. -----Original Message----- From: Chinnery, Paul [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 10:28 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip Thanks, Pete. I forgot their general search eng won't turn up viruses. One has to go to the virus enc to search. I'm surprised that 691 is still in the CPR state. Trend usually has them out of CPR within 24 hours. Paul Chinnery Network Administrator Mem Med Ctr -----Original Message----- From: Pfefferkorn, Pete (pfeffepe) [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 9:34 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip I just looked and there is 691 out there but is in test so it must be manually downloaded. I also found the virus yaya in their encyclopedia. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_YAHA.AF -----Original Message----- From: Chinnery, Paul [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 9:30 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip Are u sure? Trend says 690 is the latest and a search at Trend's site shows no hits for "yaha." Paul Chinnery Network Administrator Mem Med Ctr -----Original Message----- From: Sander Van Butzelaar [mailto:[EMAIL PROTECTED] Sent: Friday, November 28, 2003 12:34 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip Morning All The nasty fella is called: Worm_YAHA.AF and you need Trends pattern file 691 to pick it up. Enjoy your weekend. <clearing the coffee cups and empty pizza boxes> Sander -----Original Message----- From: Sander Van Butzelaar Sent: 27 November 2003 01:18 PM To: Exchange Discussions Subject: New Virus received in Details.zip Hi All Just a heads up about a new virus (or possibly a variation of an existing one) we received. The virus executed when a user unzipped the the details.zip file. Furthermore there was a text file with what looks like a random letter generated name. We scan zip files, but nothing was picked up. The virus disables Trend AV on the client, plus it disables Regedit, Task Manager and a couple more like those utils. The pc pretty much comes to a standstill after that. We are running the latest Trend AV on our Exchange server plus the latest Office Scan on the desktops. Our pc's are pretty much up-to-date with Microsoft patches too. Trend just advised us that they are developing a new patch for this virus/variation of a virus. Plse be on the lookout for updates from your AV suppliers. Regards Sander _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
