Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread R. Scott Perry
> > Let me ask you this: Do you know of any resource that gives enough detail > > that Declude could check for such an exploit? > > > >Can't say I've looked very hard, that's what I have you for. > >Don't take this as any sort of a complaint, just thinking out loud. Some of >the others are catc

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Scott MacLean
At 12:24 PM 6/12/2002, Thomas E. Hall wrote: I was wondering does F-Prot have daily downloadable virus updates?  If not what virus software do you recommend if you want to schedule jobs to run to make sure that we have the latest updates.  Or should we use 2 virus checkers. I don't remember who or

HELO:Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Jerry Murdock
Original Message - From: "Thomas E. Hall" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 12, 2002 1:11 PM Subject: RE: [Declude.Virus] W32/Frethem-Fam > We are using scripts to update F-Prot. Does the windows F-Prot update run > as a ser

Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Sheldon Koehler
> Does the windows updater work for you? I should say reliably? I have > found it does don't seem to work at all. I do use the scripts for the > server and that works. F-Prot 3.12a I have had no problems with the Windows updater at all. We purchased the site license and I have found it to be mor

HELO:Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Jerry Murdock
- Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 12, 2002 11:39 AM Subject: Re: [Declude.Virus] W32/Frethem-Fam > > >It seems to also use the MIME header exploit. This is such a > >commo

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Thomas E. Hall
PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] W32/Frethem-Fam Sheldon, Does the windows updater work for you? I should say reliably? I have found it does don't seem to work at all. I do use the scripts for the server and that works. F-Prot 3.12a ~Paul~ > If you are using

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Paul Ingram
Sheldon, Does the windows updater work for you? I should say reliably? I have found it does don't seem to work at all. I do use the scripts for the server and that works. F-Prot 3.12a ~Paul~ > If you are using the DOS version, there are scripts available to check and > download automatically.

Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Sheldon Koehler
> I was wondering does F-Prot have daily downloadable virus updates? If not > what virus software do you recommend if you want to schedule jobs to run to > make sure that we have the latest updates. Or should we use 2 virus > checkers. If you are using the DOS version, there are scripts availab

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Thomas E. Hall
I was wondering does F-Prot have daily downloadable virus updates? If not what virus software do you recommend if you want to schedule jobs to run to make sure that we have the latest updates. Or should we use 2 virus checkers. Thank you, Thomas Hall, Internet Coordinator Madison County Gover

Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread R. Scott Perry
>It seems to also use the MIME header exploit. This is such a common virus >virus element, maybe Declude should have an option to handle it. Let me ask you this: Do you know of any resource that gives enough detail that Declude could check for such an exploit? We have samples of viruses that

HELO:Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Jerry Murdock
- Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 12, 2002 10:22 AM Subject: Re: [Declude.Virus] W32/Frethem-Fam > Very interesting, since McAfee never sent out an alert about it. However, > McAf

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread John Tolmachoff
: [Declude.Virus] W32/Frethem-Fam > One more reason to have a banned extension policy in place. I do now! I had avoided it as there are legitimate reasons to send certain files. But the good of the many... It got by F-Prot 3.12a/Declude 1.53 and when I did a Google search on the name, McAffee was the o

Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread R. Scott Perry
>It got by F-Prot 3.12a/Declude 1.53 and when I did a Google search on the >name, McAffee was the only response and it was dated the 7th. I find this >interesting! Very interesting, since McAfee never sent out an alert about it. However, McAfee seems to use their E-mail virus alert system most

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Dustin Freeman
: [Declude.Virus] W32/Frethem-Fam FYI, there is a new virus out, that Sophos has alerted us to, called W32/Fretham-Fam (no other AV companies that was get alerts from, including McAfee, have sent out alerts yet). This may be become widespread because of the "social engineering" aspect o

Re: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Sheldon Koehler
> One more reason to have a banned extension policy in place. I do now! I had avoided it as there are legitimate reasons to send certain files. But the good of the many... It got by F-Prot 3.12a/Declude 1.53 and when I did a Google search on the name, McAffee was the only response and it was dat

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread Bill Beach
>FYI, there is a new virus out, that Sophos has alerted us to I received the same Sophos alert this morning. I just ran Spam Review and selected the Virus option and what do you know, one of these was there waiting for me--it was actually sent to my e-mail address. But thanks to Declude's BANEXT

RE: [Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread John Tolmachoff
. Scott Perry Sent: Wednesday, June 12, 2002 5:52 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] W32/Frethem-Fam FYI, there is a new virus out, that Sophos has alerted us to, called W32/Fretham-Fam (no other AV companies that was get alerts from, including McAfee, have sent out alerts yet). This

[Declude.Virus] W32/Frethem-Fam

2002-06-12 Thread R. Scott Perry
FYI, there is a new virus out, that Sophos has alerted us to, called W32/Fretham-Fam (no other AV companies that was get alerts from, including McAfee, have sent out alerts yet). This may be become widespread because of the "social engineering" aspect of it -- it pretends to have a Special Pa