RE: Win32.Sircam.Worm Alert.....

From: thin-line@ftb.com
Date: 07/27/01 

Message-Id: <200107262242.RAA24889@dns2.ftbonline.com>
Date: Thu, 26 Jul 2001 17:30:26 -0500
From: thin-line@ftb.com
Subject: RE: Win32.Sircam.Worm Alert.....
To: vul-dev@securityfocus.com, security-basics@securityfocus.com

Don't forget to mention that GroupShield should be set to scan ~all~ file extensions (or you can add .lnk and .pif, which aren't on the list by default) since SirCam basically has a random executable file extension.
DAT 4148 protects against SirCam and SuperDAT 4149 automatically adds the two extra file extensions to the scan list.
I'm not sure what the benefits of DAT 4150 are yet.

We are using Exchange Server 5.5 SP 3 (5.5.2650.21) with GroupShield 4.5 SP 1 (4.5.572.128) with Scanning Engine 4.1.40 (and a couple of hotfixes thrown in there).

Thank you!
Jason R DePriest, GSEC, GCFW
Intranet Web Administrator II
voice - (901) 523-5975
fax - (901) 523-5527

Quantcast