[ngw] gone.scr - enjoyed reading all your posts
Ted.Christopher at tlc.state.tx.us
Wed Dec 5 15:16:27 UTC 2001
We've blocked several hundred since yesterday. We had 7 machines trashed by it before we started blocking it. (Mgmt didn't want to block any more file types because some users might not like it.).
So it's important to note that GroupWise can still infect machines if the users opens the attachment, it just won't propagate the virus like the dreaded Lookout.
>>> etoll at syracusesupply.com 12/5/2001 7:59:13 AM >>>
Nice that is only affects LookOut users (apparently) I locked script
functionality (Ch0ke) to be off at the Domain level for all GW clients.
Just an FYI to the GroupWise community, I have stopped about 20 or so
of the gone.scr email in the last 24 hours. Its pumping away.....
I have MTASieve hooked up to my GWIA, and McAfee which all runs on same
box... Added blocking of any *.scr file also, but when the box auto
updated virus defs it started finding the *.scr files to be viri.
Fwd: [MTASieve:2jn1vzld] Virus infection notification
Attachment Name: gone.scr
A virus has been detected!
The infected attachment has been attached to this message. Please
take care that you do not infect your workstation!
Your server based AV solution may have more information on the
specific type of infection in its logs.
Information about the problem message:
FROM: cbugarchich at bpt.com
TO : [No To Addresses]
CC : [No Cc Addresses]
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Ted Christopher.vcf
More information about the ngw