From: Sally Bellows (sbellows@uclink.berkeley.edu)
Date: Thu Jul 26 2001 - 14:24:35 PDT
As a Mac user with no departmental support, could I ask for a little
basic info here? This latest virus or worm attack does not affect
Macs, right? Virex isn't offering any new virus definitions in
between its monthly updates. Is that because this virus/worm doesn't
concern us, in which case my Virex protection is sufficient, or is it
just that Virex doesn't address outbreaks as they occur? Should I be
doing more than just keeping my Virex current and performing a scan
after each update?
Thanks,
Sally
>A word of caution regarding DAT files - they do not automatically
>update the scan engine. Periodically it is a good idea to manually
>download and install a SUPER.DAT file which will insure that the
>proper scan engine is installed.
>
>Unfortunately, the NAI Virus Scan package does not warn the user
>that a newer scan engine is required, although that would seem to
>be a trivial modification. An outdated scan engine will miss viruses
>which are included in a newer DAT file.
>
>Micronet veterans will remember how we all learned about the need to
>update the scan engine when an infected Excel spreadsheet of the
>campus chart of accounts managed to infect lots of machines which
>did not have the latest scan engine but did have the latest .DAT
>files.
>
>-Al Stangenberger
> ESPM
>
>At 03:51 PM 7/25/01 -0700, Terrie Glover wrote:
>>Just to let you all know, a member of our department opened the
>>attachment she received, and her hard drive was infected. I
>>downloaded the latest DAT files and ran VirusScan on her hard drive,
>>and it failed to find anything. The Sircam virus was just discovered
>>last week. Tac Lo at WHS advised me to go to Symantec to get their
>>removal tool, and that seems to have done the trick.
>>
>>>X-Authentication-Warning: uclink4.berkeley.edu: majordom set sender
>>>to owner-magnet-list@listlink.berkeley.edu using -f
>>>X-Sender: myr@socrates.berkeley.edu
>>>Date: Tue, 24 Jul 2001 09:54:37 -0700
>>>To: Jennifer Gwirtz <jgwirtz@uclink4.berkeley.edu>,
>>> magnet-list@uclink4.berkeley.edu, micronet-list@uclink4.berkeley.edu
>>>From: Myriam Godfrey <myr@socrates.berkeley.edu>
>>>Subject: [MAGNet] Re: [Micronet] Heads up: "resume" revisited
>>>Sender: owner-magnet-list@uclink4.berkeley.edu
>>>
>>>
>>>This is the SIRCAM/32 virus, I think. A bunch of people have mailed
>>>it to me. It takes a local file name
>>>forwards it to e-mail addresses in their address book.
>>>Viruscan takes care of it, as does Norton.
>>>
>>>Myriam
>>>
>>>
>>>At 09:51 AM 7/24/01 -0700, Jennifer Gwirtz wrote:
>>>>To all:
>>>>
>>>>I just received this from several people, many of whom I don't
>>>>know. One of the e-mails had "resume" in the subject. Maybe I'm
>>>>just not remembering, but some little bit of my brain says that
>>>>"snacks" was some variation on the resume virus...I didn't find
>>>>anything on NAI about this.
> >>>
> >>>A person in our main office has also received several e-mails with
> >>>similar body text from UC Davis (he thinks).
> >>>
> >>>Needless to say, it's probably best to keep a finger on the delete button.
> >>>
> >>>Sincerely,
> >>>Jennifer
> >>>
> >>>At 8:56 AM -0700 7/24/01, Grace Teng wrote:
>>>>>From: "Grace Teng"<powerofgrace@hotmail.com>
>>>>>To: jgwirtz@uclink4.berkeley.edu
>>>>>Subject: snacks
>>>>>date: Tue, 24 Jul 2001 08:56:49 -0700
>>>>>
>>>>>Content-Type: text/plain; charset=ISO-8859-1
>>>>>Content-Disposition: message text
>>>>>
>>>>>Hi! How are you?
>>>>>
>>>>>I send you this file in order to have your advice
>>>>>
>>>>>See you later. Thanks
>>>>>
>>>>>
>>>>>Content-Type: application/mixed; name=snacks.xls.pif
>>>>>Content-Disposition: attachment; filename=snacks.xls.pif
>>>>
>>>>--
>>>>------------------------------------------------------------------
>>>>Jennifer Gwirtz 303A Moses Hall
>>>>Department Website University of California
>>>>Dept. of Philosophy Berkeley, CA 94720-2390
>>>>ph: 510/642-0218 | f: 510/642-4164 | jgwirtz@uclink4.berkeley.edu
>>>> http://philosophy.berkeley.edu/
> >>>
>>>>------------------------------------------------------------------------
>>>>The following was automatically added to this message by the list server:
>>>>
>>>>For information about Micronet, its meetings and events, and its
>>>>mailing list, including information on subscribing and unsubscribing,
>>>>see the Micronet Web site at <http://wss.berkeley.edu/micronet/>.
>>>
>>>
>>>------------------------------------------------------------------------
>>>The following was automatically added to this message by the list server:
>>>
>>>For information about MAGNet, its meetings and events, and its
>>>mailing list, including information on subscribing and unsubscribing,
>>>see the MAGNet Web site at <http://mac.berkeley.edu/help/magnet/>.
>>
>>
>>--
>>
>>
>>Terrie Glover
>>Computer Resource Specialist
>>Campus Supply
>>UC Berkeley
>>http://www.matl.berkeley.edu/campsup
>>
>>------------------------------------------------------------------------
>>The following was automatically added to this message by the list server:
>>
>>For information about Micronet, its meetings and events, and its
>>mailing list, including information on subscribing and unsubscribing,
>>see the Micronet Web site at <http://wss.berkeley.edu/micronet/>.
>>
>
>------------------------------------------------------------------------
>The following was automatically added to this message by the list server:
>
>For information about MAGNet, its meetings and events, and its
>mailing list, including information on subscribing and unsubscribing,
>see the MAGNet Web site at <http://mac.berkeley.edu/help/magnet/>.
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about MAGNet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the MAGNet Web site at <http://mac.berkeley.edu/help/magnet/>.
This archive was generated by hypermail 2b29 : Thu Jul 26 2001 - 14:54:19 PDT