RE: [Declude.Virus] Any one heard about or seen this one yet?

2007-01-19 Thread Colbeck, Andrew
Yes, and it should be old news by now. http://isc.sans.org/diary.html?storyid=2071 The end of the page lists the four executables to ban, if you don't trust your antivirus software, i.e. #Jan-18-2007 AC New fake news clips virus called Small.Dam by F-Secure and W32/Downloader.AYDY by F-Prot

re: [Declude.Virus] Any one heard about or seen this one yet?

2007-01-19 Thread Gary Steiner
I was receiving copies of it yesterday (Thursday), but nothing today. All messages contained a .exe attachment. Since I'm running AVAFTERJM, all the messages were caught as spam. I did not receive any that were not caught as spam. Original Message From: Heimir Eidskrem

RE: [Declude.Virus] Any one heard about or seen this one yet?

2007-01-19 Thread Colbeck, Andrew
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, January 19, 2007 1:01 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Any one heard about or seen this one yet? Yes, and it should be old news by now. http://isc.sans.org/diary.html?storyid

Re: [Declude.Virus] Any one heard about or seen this one yet?

2007-01-19 Thread ISPHuset Nordic AS
or the absolute easy way, and in my opinion the only, ban all exe files attached in mail. Have been doing this for several years now, Benny Colbeck, Andrew wrote: Yes, and it should be old news by now. http://isc.sans.org/diary.html?storyid=2071 The end of the page lists the four

RE: [Declude.Virus] Any one heard about or seen this one yet?

2007-01-19 Thread Colbeck, Andrew
, 2007 1:15 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Any one heard about or seen this one yet? And an alternative writeup from Symantec, with more details on the results of an infection, and with executables nobody else has mentioned. http://www.symantec.com/enterprise