We got our code within a few hours.
rusty
----- Original Message -----
From: April Lorenzen <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 19, 2000 2:23 PM
Subject: Re: [IMail Forum] Another virus.
I bought the IMFilter just now but it may be 24 hrs (????) before I receive
it... does anyone have a phone number or email for the author of IMFilter???
There is no phone # on his site and the email link on the site was returned
as "no madscientist user here" etc... I need to ask him to please expedite
my order.
Thanks!
- April
At 10:37 AM 05/19/2000 -0400, you wrote:
>In order to do what is shown below, check out
>http://bbs.lynndust.com/imail/server.asp
>
>This is an excellent resource on how to setup Imail to do SPAM filtering.
>The IMFilter that is mentioned in the article works VERY well and is well
>worth the $20.
>
>If you are feeling a little spunky, check out http://IMGate.MEIway.com
>Len Conrad has done an excellent job with a SPAM gateway for Imail. It
takes
>a little work and some external knowledge of *NIX to get it running, but it
>will offload that job from your mail server.
>
>have fun
>
>rusty
>
>----- Original Message -----
>From: Jonathan <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Friday, May 19, 2000 10:01 AM
>Subject: RE: [IMail Forum] Another virus.
>
>
>put this line in your rules.ima file
>
>B ~ file na me = " . * \. vb s": NUL
>
>Take *ALL* the spaces out.
>
>Jonathan
>
>At 03:48 PM 5/19/2000 +0200, you wrote:
>>OK. I'm a new subscriber. So how can I block all vbs files on my system
>6.02
>>?
>>Thanks in adv.
>>Didier
>>
>> > -----Message d'origine-----
>> > De : [EMAIL PROTECTED]
>> > [mailto:[EMAIL PROTECTED]]De la part de Virtual Web
>> > Servers
>> > Envoy� : vendredi 19 mai 2000 15:34
>> > � : [EMAIL PROTECTED]
>> > Objet : Re: [IMail Forum] Another virus.
>> >
>> >
>> > This is why EVERYBODY should be blocking *.vbs
>> >
>> > If anyone reading this list is NOT blocking these files because they
are
>> > unsure of exactly how to do it, post the question. The subject
>> > was beaten to
>> > death a couple of weeks ago, with every other post being about
>> > this problem,
>> > so everyone should have a pretty good idea. But if you missed it,
>> > or didn't
>> > figure it out, ASK somebody. With the number of Imail installs
>> > out there, we
>> > can make a dent in the amount of this stuff that is moving around if
>> > everybody does there jobs instead of crossing their fingers. Your
>> > users are
>> > not as smart as you are, help them.
>> >
>> > rusty
>> > ----- Original Message -----
>> > From: Jonathan <[EMAIL PROTECTED]>
>> > To: <[EMAIL PROTECTED]>
>> > Sent: Friday, May 19, 2000 9:10 AM
>> > Subject: Re: [IMail Forum] Another virus.
>> >
>> >
>> > Yep, we saw it rolling around 10a ... made me pretty glad to be
blocking
>> > *.vbs :)
>> >
>> > Jonathan
>> >
>> > At 08:45 AM 5/19/2000 -0400, you wrote:
>> > >Sorry if this is off topic, but if it saves anyone it is worth it.
>> > >
>> > >There is a new strain of the love virus called VBS.NewLove.A. This one
>is
>> > >vicious. Here is the write up from Norton.
>> > >
>> > >Mark
>> > >
>> > >Technical description:
>> > >
>> > >This polymorphic Loveletter variant will overwrite ALL files that are
>not
>> > >currently in use regardless of extension. It arrives as an email
>message
>> > >with a subject of "FW: FILENAME.EXT" and an attachment named
>> > >"FILENAME.EXT.VBS" (where FILENAME.EXT is derived from the
>> > infected user's
>> > >recently opened documents list.) The body of the email is empty. If no
>> > >documents have been used recently, this name is randomly
>> > generated. If the
>> > >message has been generated by a system running Windows NT or
>> > Windows 2000,
>> > >then the filename will be omitted and the subject of the message will
>be
>> > >"FW: .EXT" and the attachment name will be ".EXT.VBS" (again, the file
>> > >extension will vary depending on the recently opened documents list of
>> > >infected machines.)
>> > >
>> > >Removal:
>> > >
>> > >The contents of all files will be deleted, leaving the affected
>> > files with
>> > a
>> > >byte length of zero. The worm will also append the extension
>> > '.vbs' to each
>> > >of these files. For example, the file calc.exe will become
>calc.exe.vbs.
>> > >Since this worm overwrites all files regardless of extension, proper
>> > removal
>> > >can only be achieved by restoring the affected files from known clean
>> > >backups.
>> > >
>> > >
>> > >
>> > >Please visit http://www.ipswitch.com/support/mailing-lists.html
>> > >to be removed from this list.
>> >
>> >
>> >
>> > ________________________________
>> > You want it? We've got it!
>> > http://home.paperwork.com
>> >
>> > Please visit http://www.ipswitch.com/support/mailing-lists.html
>> > to be removed from this list.
>> >
>> >
>> > Please visit http://www.ipswitch.com/support/mailing-lists.html
>> > to be removed from this list.
>> >
>>
>>Please visit http://www.ipswitch.com/support/mailing-lists.html
>>to be removed from this list.
>
>
>
>________________________________
>You want it? We've got it!
>http://home.paperwork.com
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
