While this is an important step to do if not already done it can also give you a false feeling of protection. If some machine in your local network is already infected, this won't bring you anything. And even a completely locked down network can be completely wiped out by having only *one* single laptop without the patch being used in a different network such as another company or the internet itself if the user uses a dial-up to a standard ISP at home.
The only 100% good way to protect against W32.sasser is to make sure all your servers, laptops and workstations are MS04-011 patched. It's not always as easy as it seems (c:p ... >-----Urspr�ngliche Nachricht----- >Von: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Im Auftrag von >ISPHuset Nordic >Gesendet: Samstag, 1. Mai 2004 22:56 >An: [EMAIL PROTECTED] >Betreff: RE: [IMail Forum] .cpl virus? > >Just close port 445 and you are safe for now > >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Travis Rabe >> Sent: 1. mai 2004 22:33 >> To: [EMAIL PROTECTED] >> Subject: RE: [IMail Forum] .cpl virus? >> >> Watchout for the W32.sasser as well. I have gotten three >> phone calls already from relatives that DID NOT install the >> latest MS patches....they got nailed with this one. It does >> not come via e-mail...jkust through MS holes. Looking nasty already. >> >> Travis >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of R. >> Scott Perry >> Sent: Saturday, May 01, 2004 12:54 PM >> To: [EMAIL PROTECTED] >> Subject: Re: [IMail Forum] .cpl virus? >> >> >> >> >Anyone else seen .cpl files as attachments to what looks like your >> >standard virus email? >> > >> >It was an email made to look like some dating site >invitation with a >> >girl's photo attached and a .cpl file F-Prot did not pick >it up as a >> >virus. >> >> That sounds like Bagle.Z, which just came out a few days ago. >> This variant of Bagle is probably the first virus to use .cpl files. >> >> You should make sure that your copy of F-Prot (.exe file) and >> your virus definitions are up-to-date. >> >> Note that these will automatically be blocked with the latest >> interim release of Declude Virus Pro (as an invalid .CPL file). >> >> -Scott >> --- >> Declude JunkMail: The advanced anti-spam solution for IMail >> mailservers since 2000. >> Declude Virus: Ultra reliable virus detection and the leader >> in mailserver vulnerability detection. >> Find out what you've been missing: Ask for a free 30-day evaluation. >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >> >> >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >> > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
