gone.scr - enjoyed reading all your posts

Eric Toll etoll at syracusesupply.com
Wed Dec 5 13:59:13 UTC 2001

Nice that is only affects LookOut users (apparently)  I locked script
functionality (Ch0ke) to be off at the Domain level for all GW clients.

Just an FYI to the GroupWise community, I have stopped about 20 or so
of the gone.scr email in the last 24 hours.  Its pumping away.....

I have MTASieve hooked up to my GWIA, and McAfee which all runs on same
box... Added blocking of any *.scr file also, but when the box auto
updated virus defs it started finding the *.scr files to be viri.

Fwd: [MTASieve:2jn1vzld] Virus infection notification

Attachment Name: gone.scr

A virus has been detected!

The infected attachment has been attached to this message. Please
take care that you do not infect your workstation!

Your server based AV solution may have more information on the
specific type of infection in its logs.

Information about the problem message:

FROM: cbugarchich at bpt.com
TO : [No To Addresses]
CC : [No Cc Addresses]
Subject: Hi
-------------- next part --------------
An embedded message was scrubbed...
From: "MTASieve" <postmaster at panthus.com>
Subject: [MTASieve:2jn1vzld] Virus infection notification
Date: Wed,  5 Dec 2001 08:22:13 -0500
Size: 1314
Url: http://ngwlist.com/pipermail/ngw/attachments/20011205/ce342cde/attachment.mht 

More information about the ngw mailing list