Within the last hour there has been an update from F-Prot for sign.def and
sign2.def. I do not know what has been added but the update is available.
Dean Zingle
Optrics Inc.
- Original Message -
From: Grant Griffith [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 04,
Trend Micro had an update out at 11:30am cst. Been catching them since.
Had a few come through in the open window before they released dat earlier.
Ken
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram
Sent: Tuesday, December 04, 2001 1:49 PM
I got it from F-Prot site
http://www.f-prot.com/f-prot/virusinfo/goner.html
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bill Beach
Sent: martedì 4 dicembre 2001 20.51
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] New W32/Goner-A virus
I just
You are right about F-Prot!!:) I just download and tried it again it it is
now catching it. But as of 45min ago the defs on frisk.is where not
cathching at least it didn't work here but all is rosey now:)
Thanks, Paul
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Cool thanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt
Sent: Tuesday, December 04, 2001 3:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] New W32/Goner-A virus
Nope - has nothing to do with boot disks. EXTRA.DATs contain
http://www.mcafee.com/anti-virus/viruses/goner/default.asp?cid=2636
scroll down and follow the link to download the EXTRA.DAT.
That's how McAfee handled last-minute updates.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Paul Ingram
Sent: Tuesday,
I removed the EXTRA.DAT for copyright reasons - and it's available online
for download. But you may find the document helpful.
-Original Message-
From: Virus Research [mailto:[EMAIL PROTECTED]]
Network Associates
McAfee AVERT, UK
A Division of Network Associates
UK, Aylesbury
Customer
I've caught about 30 with f-prot since noon-ish(EST) when the patterns were
updated.
Jerry
Subject: Hi
Incoming/Outgoing: incoming
Number Recepients: 1
Message ID: 001401c17cf8$2ce20c70$6664a8c0@XX
Date: 12/04/2001
Time: 14:17:52
QueueFile Name: D215d228.SMD
Infected File: gone.scr
Virus
Is there a way to kill all incoming .scr attachments? using declude or
something else? i would prefer that it happen after the virus scan... just
in case a new .scr virus comes out...
thanks,
jim
- Original Message -
From: Jerry Murdock [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent:
The latest update for Fprot is catching Goner-A. I put the update in place
about an hour ago and so far have caught about 30 copies of the virus.
Jim Matuska Jr.
Nez Perce Tribe
Computer Services
[EMAIL PROTECTED]
- Original Message -
From: Dean Zingle, Ipswitch.ca [EMAIL PROTECTED]
To:
In your virus.cfg file in your declude folder
Works perfectly
BANEXT lnk
BANEXT vbs
BANEXT scr
BANEXT shs
BANEXT wsh
BANEXT vbx
BANEXT bat
BANEXT cab
BANEXT nws
BANEXT asp
BANEXT dll
BANEXT cmd
BANEXT xml
BANEXT sys
BANEXT asd
BANEXT chm
BANEXT ocx
BANEXT vbe
BANEXT wsf
BANEXT js
Your vir*.log
Is there a way to kill all incoming .scr attachments? using declude or
something else?
You can add a line BANEXT scr to your \IMail\Deculde\virus.cfg file,
which will ban files with .scr attachments. Note, however, that no
notifications will go out if you do this.
what version do i have to be running to use this feature?
thanks,
jim
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 04, 2001 2:24 PM
Subject: Re: [Declude.Virus] New W32/Goner-A virus
Is there a way to kill all incoming
what version do i have to be running to use this feature?
It is in v1.24 and higher (you can type Declude -diag from a command
prompt to see the version number).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This
Does anyone know if McAfee is catching the w32/Goner-A virus?
Mike Abbott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
I've seen numerous auto-update batch files for most of the AV products,
but don't remember seeing one for McAfee. Could someone help me out
there? I know simple batch files, AT scheduler, but after looking at
the ftp.nai.com site, I'm not sure which directory and update file to
grab.
Thanks,
and will it scan first and if no virus isfound will it then ban it? thereby
sending the notification if it is known to be infected?
That is correct -- the E-mail will still be scanned, and the notifications
will be sent out if it contains a virus.
Does anyone know if McAfee is catching the w32/Goner-A virus?
Yes. McAfee, F-Prot, Sophos, and others have new virus definitions that
are catching it.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail
So if you use the banext, the mail is not delivered if the attachment matches the
extension but there is no notification at all?
example
banext scr
I get a message that has an scr attachment but not a virus. The message is not
delivered and there is no notification as to the non-delivery?
So if you use the banext, the mail is not delivered if the attachment
matches the extension but there is no notification at all?
That is correct. The E-mail will be quarantined, but no virus
notifications will go out.
example
banext scr
I get a message that has an scr attachment but not a
20 matches
Mail list logo
