Re: [cobalt-users] How to find W32.Klex.H@mm Virus on my server?

["SW" <wppiphoto@xxxxxxxx>]

David,

Symantec Antivirus 2004 caught the following viruses while f-prot w/ the
latest virus def only caught the W32.Klex.H@mm virus. Here is what else it
missed by Symantec caught:

The email attachment Fhvwk.zlq is infected with the W32.Klez.H@mm virus.
The email attachment test.zl9 is infected with the W32.Mimail.L@mm virus.
CC10DB.tmp is infected with the W32.Sobig.F@xxxxxx virus.
CC10B8.tmp is infected with the W32.Sobig.F@xxxxxx virus.
CC108D.tmp is infected with the W32.Sobig.F@xxxxxx virus.
CCB9E.tmp is infected with the W32.Sobig.F@xxxxxx virus.
CCB7B.tmp is infected with the W32.Sobig.F@xxxxxx virus.
.tmp is infected with the W32.Sobig.F@xxxxxx virus.
The email attachment upgrade.zl9 is infected with the W32.Swen.A@mm virus.
The email attachment hrdni.zl9 is infected with the W32.Swen.A@mm virus.
The email attachment Installation727.zl9 is infected with the W32.Swen.A@mm
virus.
The email attachment wendynaked.jpg.exe within Private.zip is infected with
the Backdoor.Sysbug virus.

All except the 1st one were missed by f-prot. In my opinion not the best
thing to have missed so many but I'm glad I run antivirus on each
workstation. I think it's also a good thing to run various vendors antivirus
scanners on different systems, just incase one vendor misses something.

SW
----- Original Message ----- 
From: "David Lucas" <david@xxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Tuesday, December 16, 2003 8:09 PM
Subject: Re: [cobalt-users] How to find W32.Klex.H@mm Virus on my server?


At 09:44 AM 12/16/2003, you wrote:
>LOL, in Washington, DC metro area there are no more flu shots available. If
>I knew this, I could have taken all of my computers to my local Dr. office
>to get shots. :-)
>
>An interesting note is that I did a scan of the server using f-prot which
>only found 1 virus but then I downloaded all e-mails for 2 users who no
>longer use some old addresses due to spam and Symantec Anti-Virus on my
>computer found over 30 viruses in about 5,000 e-mails. BTW, I'm using the
>latest f-prot def. Does this mean that f-prot is not that great as a virus
>scanner? And if so, what is better?

i too am using the latest from them and i have norton av on my personal
computer, i have not had a single virus make it to my computer with the
f-prot running and i have probably caught some 33000 on the server
including some half dozen Klez almost every day.

What were the 30 that your computer caught?
There used to be a dispute between a virus and a trojan  or worm.  Used to
be Symantec did not catch them and McAffe did.  Symantec said they were not
a virus.  Symantec now catches some spyware, which are not a "virus" though
they are not necessarily what you want either.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users