Re: VIRUS IN YOUR MAIL

From: Brett Glass (brett@lariat.org)
Date: 10/29/01 

Date: Mon, 29 Oct 2001 09:35:19 -0700
To: Peter Pentchev <roam@ringlet.net>, Nils Holland <nils@tisys.org>
From: Brett Glass <brett@lariat.org>

At 10:04 AM 10/29/2001, Peter Pentchev wrote:

>The problem is not virus scanners per se, the problem is *broken* virus
>scanners which do not send their automated replies to the right address.

IMHO, it's a good idea, when a worm has been broadcast to a list, to
inform the members of that list. In my personal experience, this has
saved a lot of people from being infected. YMMV, but I don't think that
the scanner's behavior was inappropriate.

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: VIRUS IN YOUR MAIL
    ... >>scanners which do not send their automated replies to the right address. ... > IMHO, it's a good idea, when a worm has been broadcast to a list, to ...
    (FreeBSD-Security)
  • Re: Cant find C:windowsuserint32.exe
    ... You have a worm or a worm has been removed without removing its startup ... If I download all those files, ... >> files or you can download the files and perform a scan in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal ...
    (microsoft.public.windowsxp.general)
  • Re: WINTBP.exe Worm!!!!! ARGH!
    ... | I have had this worm on one of my PC's that run windows 2000. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: How did I get this?
    ... The submission will then be tested against several different AV vendor's scanners. ... | None of the registry entries which the worm should have caused were there. ... They were NOT false positives. ... That system was exhibiting | symptoms, and when it was cleaned with XoftSpy the system ran fine again. ...
    (microsoft.public.security.virus)
  • Re: generic host process win32/comp restart
    ... but i've scanned for welchia, blaster, and sasser, and nothing has come up. ... >> most solutions i've read have recommended running virus scanners for the ... >> sasser, blaster, or welchia worm. ...
    (microsoft.public.windowsxp.general)