|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] RE:
If you will notice the extension of the removed filename... It was vbs. Don't ring a bell, huh? Windoze users have to fear that stuff...glad I don't have that issue. But, that is how the l0ve letter virus got around. It relied on the inherent flaws of windoze and the vb stuff. In this case it was passed through a virus scanner and the result was the message portraying this. eric. Dean Cunningham wrote: > > Um.. the mail Örjan Sjöström sent did not contain the VBS code , well at > least the one sent to me did not. > > I think some peoples AV software is a bit sensitive at the moment and you > are getting false positives. This has been quite common when AV vendors put > "quick fixes" out. They tidy it up later. > > The attachment with the message was a text file with > > ****************** Virus Warning Message (on the network) > > <filename> is removed from here because it contains a virus. > > ********************************************************* > > The <filename> may of triggered it or the message content or a combination > of both. > > This Pres and FBI version was dealt to by my AV product a couple of days ago > , so I know it detects it. > > The message is not from my AV product - mine is a seek and destroy, no namby > pamby "clean it for you and here you are sir/madam" :-) > > And if you think because you have an AV product in place you will never be > caught... think again... It takes time for the AV vendors to react.. a days > delay could be too late for you. this is where content scanning tools come > into their own as an AV defence. > > cheers > deanc > > -----Original Message----- > From: [email protected] [mailto:[email protected]] > Sent: Friday, 13 October 2000 3:32 AM > To: [email protected] > Cc: [email protected] > Subject: [FW1] RE: > > Indeed. It is absolutely amazing how often we get e-mail virii on > *firewall* mailing lists. Why would somebody bother to buy and install > an expensive firewall if they have e-mail software that executes every > piece of hostile code that comes in the mail?!? I mean, hello? Is anybody > home? Some guys really need a clue... > > > Amanda. > > > On Thu, 12 Oct 2000, THELLIER, Francis (Kedros) wrote: > > The message you sent contains a virus that has been removed by my > antivirus, > > please stop to post mail like this here ! > > > De: Örjan Sjöström [SMTP:[email protected]] > > > VERY JOKE..! SEE PRESIDENT AND FBI TOP SECRET PICTURES.. > > *************************************************** > This e-mail is not an official statement of the > Waikato Regional Council unless otherwise stated. > Visit our website http://www.ew.govt.nz > *************************************************** > > ================================================================================ > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================================================ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
