Re: [FW1] eSafe does not clean Win32.BadTrans

[Chris F <freaknetboy@FW1-NOSPAMyahoo.com>]

Assaf,

Thanks for your help and concern.

I am using ESP v2.1 build 101 and pattern dated
17/5/2001

I have been using eSafe for 3 years now, and FW1 since
3.0b 3064.

I agree that www.eSafe.com shows that win32.badtrans
is a "vandal" eSafe is prepared to deal with.

eSafe reports the file scanned and clean -- however,
it is not. It is reported and found by Mcafee -- and
Yahoo (Norton) as well -- which stopped it from
spreading within a portion of our networks.

I called your support number -- spoke to a "John" and
emailed the virus to the email address listed in
"Submit a Virus" at www.eSafe.com

The problem is that this worm is penetrating our
network and spreading  :(

I was told a "fix" would be available in the morning.
I'll keep my fingers crossed!

If you'd like me to send the virus to you, let me
know.

Thanks -- Chris

--- kipod@amber.esafe.com wrote:
> Hello Chris,
> 
> eSafe's virus tables contains the signatures for
> BadTrans since 25/4.
> I see no reason that this virus should go
> undetected. Please verify that
> you are using an updated build of our product (build
> 101 for Gateway 2.1,
> and build 52 for eSafe Gateway 3.0), and that your
> virus tables are indeed
> updated.
> 
> There are several more things I would like to check
> with you
> (configuration, mainly), but I do not think this
> list is the most
> appropriate place to conduct this.
> Please answer me to Gateway@eSafe.com, and we will
> continue investigating.
> 
> 
> Regards,
>   Assaf Dekel,
>   eSafe Gateway Support Team.
> 
> 
> On Tue, 29 May 2001, Chris F wrote:
> 
> > 
> > Hi All,
> > 
> > Warning for those of you using eSafe CVP/AV with
> > Firewall-1 -- it does NOT correctly remove the
> > Win32.BadTrans worm!
> > 
> > At least, not for me :(
> > 
> > Our internal Mcafee A/V stopped it (fortunately),
> but
> > not before some other sites dependent upon eSafe
> got
> > hit.
> > 
> > Just FYI -- Chris
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Auctions - buy the things you want at great
> prices
> > http://auctions.yahoo.com/
> > 
> > 
> >
>
================================================================================
> >      To unsubscribe from this mailing list, please
> see the instructions at
> >               
> http://www.checkpoint.com/services/mailing.html
> >
>
================================================================================
> > 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================