There is a new virus
There is a new virus. The code name is WORK. If you receive WORK from your colleagues, your boss, via e-mail, or from anyone else - do not touch WORK under any circumstances. This virus wipes out your private life completely. If you should happen to come in contact with this virus, take two friends and go straight to the nearest bar. Order drinks and after three rounds, you will find that WORK has been completely deleted from your brain. Forward this virus warning immediately to at least five friends. Should you realize you do not have five friends, this means you are already infected by this virus and WORK already controls your whole life. If this is the case, go to the bar and stay until you make at least five friends. Then retry. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
Keep us updated. I'm thinking about using SUS, and this is a good example of where it would be useful... -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:38 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam e=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
The DAT from Trend just came out. 604. -Original Message- From: Martin Blackstone Sent: Monday, August 11, 2003 2:41 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
SUS is software update services. Like windowsupdate, but automated and internal to an organization. It, IIRC, distributes and installs critical updates for Windows, not Outlook/Office. Erick -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:49 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus I don't handle the Trend side of the house. What is SUS without getting flamed From: Erick Thompson [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:47:19 -0700 Keep us updated. I'm thinking about using SUS, and this is a good example of where it would be useful... -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:38 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam e=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode= lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com
RE: Watch Out - New Virus
That's what I thought. I thought it was unique acronym to Trend. From: Erick Thompson [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:51:33 -0700 SUS is software update services. Like windowsupdate, but automated and internal to an organization. It, IIRC, distributes and installs critical updates for Windows, not Outlook/Office. Erick -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:49 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus I don't handle the Trend side of the house. What is SUS without getting flamed From: Erick Thompson [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:47:19 -0700 Keep us updated. I'm thinking about using SUS, and this is a good example of where it would be useful... -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:38 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam e=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode= lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl
RE: Watch Out - New Virus
thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
Also: www.sarc.com/avcenter/venc/data/w32.blaster.worm.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Ko Sent: Monday, August 11, 2003 2:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Watch Out - New Virus
Iis, windows family 2k or higher, ie, and something I cant remember. lol -Original Message- From: Erick Thompson [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 3:52 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus SUS is software update services. Like windowsupdate, but automated and internal to an organization. It, IIRC, distributes and installs critical updates for Windows, not Outlook/Office. Erick -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:49 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus I don't handle the Trend side of the house. What is SUS without getting flamed From: Erick Thompson [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:47:19 -0700 Keep us updated. I'm thinking about using SUS, and this is a good example of where it would be useful... -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:38 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam e=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode= lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl
RE: Watch Out - New Virus
I don't handle the Trend side of the house. What is SUS without getting flamed From: Erick Thompson [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:47:19 -0700 Keep us updated. I'm thinking about using SUS, and this is a good example of where it would be useful... -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:38 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus thanks, I had gotten that. When I was running the active update from the scanmail interface I was getting the error. After about 30 or so tries I got the update downloaded to my system. Now I'll see how well SUS is working for us. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:44 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus It wraps add LAST.A to the end From: Martin Blackstone [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: RE: Watch Out - New Virus Date: Mon, 11 Aug 2003 14:40:50 -0700 Aye -Original Message- From: Waters, Jeff [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:29 PM To: Exchange Discussions Subject: RE: Watch Out - New Virus is anyone else getting the update source not found error? -Original Message- From: Brian Ko [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 5:30 PM To: Exchange Discussions Subject: Watch Out - New Virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam e=WORM_MSB LAST.A _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Same here Joseph Smith Network Administrator Perlos, Inc. 5201 Alliance Gateway Fort Worth, TX 76178-3729 Work: 817-224-9012 [EMAIL PROTECTED] -Original Message- From: Bailey, Matthew [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:21 PM To: Exchange Discussions Subject: RE: Heads up on a new virus Ditto. - Matt Matthew Bailey LAN Engineer CSK Auto, Inc. Voice: 602.631.7486 Fax: 602.294.7486 -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 11:20 AM To: Exchange Discussions Subject: RE: Heads up on a new virus We do, and hourly. Works great. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 2:06 PM To: Exchange Discussions Subject: RE: Heads up on a new virus Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
I use TrendMicro Control Manager (TMCM) 2.5 to check the update site every 15 minutes. You can set it to check every 5 minutes I believe. Brian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Friday, August 01, 2003 1:06 PM To: Exchange Discussions Subject: RE: Heads up on a new virus Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Heads up on a new virus
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Already on it and blocked. Thanks Martin. -- From: Martin Tuip [MVP] Reply To: Exchange Discussions Sent: Friday, August 1, 2003 12:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAI L.A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=la ng=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Thanks Martin, got the new definition but learned something strange at the same time Using Trend 3.52 with Ex5.5 SP4, NT4.0 SP6a and have the update set to every hour and it has been working great. I just checked to see what version we were on and all should have been well but we were on 355 not 357, ran the update manually and then checked the logs. By looking in the logs it seems that trend stopped updating at 10pm on the 30th, even the manual update is not showing up in the logs. I am going to Trends site now, but was wondering if any of you other users had seen this in the past. Thanks Jeff -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
We run Trend and automatically update every hour. Paul -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: 01 August 2003 19:06 To: Exchange Discussions Subject: RE: Heads up on a new virus Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] -- If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.drkw.com/disc/email/ or contact the sender. -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
We do, and hourly. Works great. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 2:06 PM To: Exchange Discussions Subject: RE: Heads up on a new virus Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Heads up on a new virus
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-015.asp - Original Message - From: Peter Orlowski [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Friday, August 01, 2003 2:23 PM Subject: RE: Heads up on a new virus Anyone know what the IE system vulnerability is that that article describes? - Peter -Original Message- From: Aaron Brasslett [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 11:16 AM To: Exchange Discussions Subject: RE: Heads up on a new virus Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Ditto. - Matt Matthew Bailey LAN Engineer CSK Auto, Inc. Voice: 602.631.7486 Fax: 602.294.7486 -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 11:20 AM To: Exchange Discussions Subject: RE: Heads up on a new virus We do, and hourly. Works great. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 2:06 PM To: Exchange Discussions Subject: RE: Heads up on a new virus Just out of curiosity, who here uses trend and how often do you have it set to update? Just curious John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Be excellent to each other ---End of Line--- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Anyone know what the IE system vulnerability is that that article describes? - Peter -Original Message- From: Aaron Brasslett [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 11:16 AM To: Exchange Discussions Subject: RE: Heads up on a new virus Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
I received this earlier today and being the administrator I knew that I had not sent myself this message. The message included a WinZip attachment which was rather interesting to take apart. It turned out to be an html document that directed the browser to go to a website and run a file foveae -Dave Vantine -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Symantec doesn't have the virusdef file that blocks this ready for live update yet :-( Aaron Brasslett wrote: Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
I am not sure if this was simply bad typing but the file name was an executable called foo (foo.exe) -Original Message- From: Dave Vantine [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 2:40 PM To: Exchange Discussions Subject: RE: Heads up on a new virus I received this earlier today and being the administrator I knew that I had not sent myself this message. The message included a WinZip attachment which was rather interesting to take apart. It turned out to be an html document that directed the browser to go to a website and run a file foveae -Dave Vantine -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Sure they do. They've had it for a few hours. http://www.sarc.com/avcenter/defs.download.html -Original Message- From: Jim Helfer [mailto:[EMAIL PROTECTED] Posted At: Friday, August 01, 2003 1:42 PM Posted To: MSExchange Mailing List Conversation: Heads up on a new virus Subject: RE: Heads up on a new virus Symantec doesn't have the virusdef file that blocks this ready for live update yet :-( _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
No, but they do have it in their intelligent updater/xdb update if you use NAV/SAV CE, it should be easy enough to roll out. Nick -Original Message- From: Jim Helfer [mailto:[EMAIL PROTECTED] Sent: 01 August 2003 19:42 To: Exchange Discussions Subject: RE: Heads up on a new virus Symantec doesn't have the virusdef file that blocks this ready for live update yet :-( Aaron Brasslett wrote: Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] The information in this e-mail and any attachment(s) is confidential and may be legally privileged. This e-mail is intended solely for the addressee. If you are not the addressee, dissemination, copying or other use of this e-mail or any of its content is strictly prohibited and may be unlawful. If you are not the intended recipient please inform the sender immediately and destroy the e-mail and any copies. All liability for viruses is excluded to the fullest extent permitted by law. Any views expressed in this message are those of the individual sender. No contract may be construed by this e-mail. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
Nick Field wrote: No, but they do have it in their intelligent updater/xdb update if you use NAV/SAV CE, it should be easy enough to roll out. Nick Well, it wasn't hard, but it also wasn't _automatic_. If I hadn't read this ML today, I might have missed it. Jim H -Original Message- From: Jim Helfer [mailto:[EMAIL PROTECTED] Sent: 01 August 2003 19:42 To: Exchange Discussions Subject: RE: Heads up on a new virus Symantec doesn't have the virusdef file that blocks this ready for live update yet :-( Aaron Brasslett wrote: Thanks Martin. We are already seeing this virus hit our file filters. Aaron -Original Message- From: Martin Tuip [MVP] [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 1:51 PM To: Exchange Discussions Subject: Heads up on a new virus http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL. A -- Martin Tuip MVP Exchange Exchange 2000 List owner www.exchange-mail.org www.sharepointserver.com [EMAIL PROTECTED] -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] The information in this e-mail and any attachment(s) is confidential and may be legally privileged. This e-mail is intended solely for the addressee. If you are not the addressee, dissemination, copying or other use of this e-mail or any of its content is strictly prohibited and may be unlawful. If you are not the intended recipient please inform the sender immediately and destroy the e-mail and any copies. All liability for viruses is excluded to the fullest extent permitted by law. Any views expressed in this message are those of the individual sender. No contract may be construed by this e-mail. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
This has almost always been the first place I learn about new viruses. I subscribe to numerous virus warning lists and this list has almost always been first to identify a virus that is a true threat. Well, it wasn't hard, but it also wasn't _automatic_. If I hadn't read this ML today, I might have missed it. Jim H _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Heads up on a new virus
On the note of this Virus I think we updated in time. But I see ISSCan was updated post sp4 for Exchange 5.5. Does anyone have the latest version of the file? Paul -Original Message- From: Aaron Brasslett [mailto:[EMAIL PROTECTED] Sent: 01 August 2003 21:14 To: Exchange Discussions Subject: RE: Heads up on a new virus This has almost always been the first place I learn about new viruses. I subscribe to numerous virus warning lists and this list has almost always been first to identify a virus that is a true threat. Well, it wasn't hard, but it also wasn't _automatic_. If I hadn't read this ML today, I might have missed it. Jim H _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] -- If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.drkw.com/disc/email/ or contact the sender. -- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Dr. Watson (was New Virus / Worm??)
On my Exchange box, when I try to log on, I keep getting Dr. Watson error that says the following: Explorer.exe Exception Access Violation (0xc005), Address:0x77f7d18e Everytime I close that down, another one pops up in about 5 seconds. There isn't even enough time to open the Run command to run a latest patch. The patch for Code Red was installed last month, but I can't get on to the server to install the latest one. Any ideas? This started yesterday when the nimda virus came through. Has anyone figured out hoe to stop the creation of *.eml files on the network too? NT 4 sp6a Exchange 5.5 sp3 Mike _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Dr. Watson (was New Virus / Worm??)
You stop the .eml files by getting all the (attacking?) PCs on your network virus scanned with up to date antivirus software with today's virus patterns. Also shut down your IIS services if you think they may have been compromised. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Mike Omilian [mailto:[EMAIL PROTECTED]] Sent: 19 September 2001 14:40 To: Exchange Discussions Subject: Dr. Watson (was New Virus / Worm??) On my Exchange box, when I try to log on, I keep getting Dr. Watson error that says the following: Explorer.exe Exception Access Violation (0xc005), Address:0x77f7d18e Everytime I close that down, another one pops up in about 5 seconds. There isn't even enough time to open the Run command to run a latest patch. The patch for Code Red was installed last month, but I can't get on to the server to install the latest one. Any ideas? This started yesterday when the nimda virus came through. Has anyone figured out hoe to stop the creation of *.eml files on the network too? NT 4 sp6a Exchange 5.5 sp3 Mike _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Dr. Watson (was New Virus / Worm??)
Explorer.exe Exception Access Violation (0xc005), Address:0x77f7d18e the virus seems to do something in it's later stages of infection that causes the problem you describe. Removing the virus has no effect. We have two servers with the same problem, and have tried everything to correct it - if we don't hear of a fix soon it's going to be format time. some people are still unclear on this virus - check your processes in task manager, look for 'mmc.exe' - this is the virus masquerading as the management console. You have to use the kill utility to finish off the process. Then delete mmc.exe from the winnt directory. Get the latest AV definitions and do a scan to quarrantine all the nasty files. delete them. also get people display the 'view as web page' or whatever it is in 'folder options' - this is perpetuating the virus because you can start it off just by selecting the file in the folder. you may also find that your 'guest' account is now a member of the local administrators group! the virus propogates via email, network shares and an IIS backdoor. dan. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Dr. Watson (was New Virus / Worm??)
The same thing happened to me. It is Nimda. My box appears to be hosed. I was able to boot, but not log on. As soon as I logged on, and the desktop loaded, Doc Watson kept popping up. I booted the system, did not log on, mapped the C$ drive to a machine that had new signature files, and scanned the C$ drive. The Nimda virus came up in mmc.exe and the jetadmin.exe (go figure). The hosed box did not have an altered system.ini or load.exe anywhere. I think I'll be doing a fresh install in the near future. Will -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 19, 2001 9:44 AM To: Exchange Discussions Subject: RE: Dr. Watson (was New Virus / Worm??) You stop the .eml files by getting all the (attacking?) PCs on your network virus scanned with up to date antivirus software with today's virus patterns. Also shut down your IIS services if you think they may have been compromised. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Mike Omilian [mailto:[EMAIL PROTECTED]] Sent: 19 September 2001 14:40 To: Exchange Discussions Subject: Dr. Watson (was New Virus / Worm??) On my Exchange box, when I try to log on, I keep getting Dr. Watson error that says the following: Explorer.exe Exception Access Violation (0xc005), Address:0x77f7d18e Everytime I close that down, another one pops up in about 5 seconds. There isn't even enough time to open the Run command to run a latest patch. The patch for Code Red was installed last month, but I can't get on to the server to install the latest one. Any ideas? This started yesterday when the nimda virus came through. Has anyone figured out hoe to stop the creation of *.eml files on the network too? NT 4 sp6a Exchange 5.5 sp3 Mike _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
