RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread John T \(Lists\)
rew > Sent: Wednesday, June 28, 2006 2:26 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus > Importance: Low > > I don't know where that ">" character in front of my From sentence came > from. The fir

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
nal Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Colbeck, Andrew > Sent: Wednesday, June 28, 2006 2:14 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > I haven't seen

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
> Behalf Of John T (Lists) > Sent: Wednesday, June 28, 2006 1:06 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > Back to the matter indicated in the subject line, how are > others dealing with this? > >

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Ncl Admin
John, I think that F-prot now is getting it. Subject: Declude Virus caught a virus X-Mailer: X-Declude-Sender: postmaster [127.0.0.1] X-Note: Spam Score: 0 X-Note: SMTP Sender: postmaster X-Note: Reverse DNS & IP: (Private IP) [127.0.0.1] X-Country-Chain: X-Note: To: nclife.com X-RCPT-TO: <[EMA

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Darrell \([EMAIL PROTECTED])
John, CLAMAV is catching it on my systems. Darrell --- fpReview - Review held mail easily and quickly. http://www.invariantsystems.com John T (Lists) writes: Back to the matter indicated in the subject line, how are others dealing with this? Is

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Scott Fisher
y low. But I'm not looking forward to hand correcting 120 of these a month. - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Wednesday, June 28, 2006 2:07 PM Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Matt, Th

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
___ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, June 28, 2006 2:48 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus David, The CRLF thing doesn't affect me since I ha

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread John T \(Lists\)
Back to the matter indicated in the subject line, how are others dealing with this? Is F-Prot and AVG and others catching this now? Which AV scanners are indeed catching it? Now for the bigger question: How do we combat this and future such versions without outright blocking of the file extensio

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Michael Thomas - Mathbox
to handle viruses and spammers. Mike > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of David Barker > Sent: Wednesday, June 28, 2006 3:08 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word do

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
TECTED] On Behalf Of Matt Sent: Tuesday, June 27, 2006 7:04 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus John,

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Ncl Admin
gt;Macro-Virus >> >> As I know yes but >> >> BANNAME my_notebook.doc >> >> wouldn't work for files within zip-archives. >> >> Markus >>

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
]] On Behalf Of Matt Sent: Wednesday, June 28, 2006 1:49 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus David, I'm just wondering about the issue with the invalid characters in the Mail From's that caused massive spam leakage almo

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
___ > >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >Matt >Sent: Tuesday, June 27, 2006 7:04 PM >To: declude.virus@declude.com >Subject: Re: [Declude.Virus] New Virus: zipped word doc with >Macro-Virus > > >John, > >Not to say that this wouldn

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Robert Grosshandler
Matt - Thanks for keeping track of all of this for the rest of us. Rob -Original Message- David, I'm just wondering about the issue with the invalid characters in the Mail From's that caused massive spam leakage almost a month ago. Is this too supposed to be fixed? I'm also very, ve

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Matt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Tuesday, June 27, 2006 3:10 PM To: declude.virus@declude.com Subject: RE: [Dec

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Kami Razvan
look right. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, June 27, 2006 5:48 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Is the word document only

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Colbeck, Andrew
OTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Marc Catuogno > Sent: Wednesday, June 28, 2006 6:03 AM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > Um, no making fun here - I opened it. I thought it was ju

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread David Barker
: Tuesday, June 27, 2006 7:04 PM To: declude.virus@declude.com Subject: Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus John, Not to say that this wouldn't be something that is nice to have, I can think of dozens of things that are very largely useful on a much more regular basis

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-28 Thread Marc Catuogno
Um, no making fun here - I opened it. I thought it was just spam someone forwarded it to my spam account. I didn't find the Trojan downloader on my PC. I'm ASSUMING that you have to hit the "check prices" macro button as no macro seemed to auto-execute... I just downloaded the intelligent updat

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Matt
hn T (Lists) Sent: Tuesday, June 27, 2006 11:48 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus Is the word document only named that? John T eServices For You "Seek, and ye shall find!" -Original Messag

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Colbeck, Andrew
EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of John T (Lists) > Sent: Tuesday, June 27, 2006 3:38 PM > To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > Importance: High > > I know. :( > > Declu

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread John T \(Lists\)
To: declude.virus@declude.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus > > As I know yes but > > BANNAME my_notebook.doc > > wouldn't work for files within zip-archives. > > Markus > > > -Original Message- > &

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Markus Gufler
de.com > Subject: RE: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > Is the word document only named that? > > John T > eServices For You > > "Seek, and ye shall find!" > > > -Original Message- > > From: [EMAIL PROTE

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread John T \(Lists\)
Is the word document only named that? John T eServices For You "Seek, and ye shall find!" > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus > Gufler > Sent: Tuesday, June 27, 2006 11:32 AM > To: declude.virus@declude.com > Subject: [Declude.Viru

RE: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Colbeck, Andrew
rom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Darrell ([EMAIL PROTECTED]) > Sent: Tuesday, June 27, 2006 12:08 PM > To: declude.virus@declude.com > Subject: Re: [Declude.Virus] New Virus: zipped word doc with > Macro-Virus > > Actually, it is CLAMAV catchi

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Darrell \([EMAIL PROTECTED])
Actually, it is CLAMAV catching it. Not sure about McAfee as I stop on first virus. F-Prot is def. not catching it though. Darrell Darrell ([EMAIL PROTECTED]) writes: Mcafee is catching these Trojan.Myno on my systems. Darrell --- Check out http:

Re: [Declude.Virus] New Virus: zipped word doc with Macro-Virus

2006-06-27 Thread Darrell \([EMAIL PROTECTED])
Mcafee is catching these Trojan.Myno on my systems. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parse