OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Marc Fossi (mfossisecurityfocus.com)
Date: Thu Sep 13 2001 - 17:35:51 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    No. What happened was I made the mistake of approving a message that
    included an attached .zip file containing a .vbs file. Everyone who had
    their AV software configured to reject .vbs attachments did exactly that
    and flooded everyone listed on that email with virus alerts (mostly from
    Antigen).

    Just to let you all know, some of your AV software is giving up way too
    much information about your Exchange configurations.

    In the future, if anyone has a relevant file to post to the list, we will
    find a public website to put it on and post the url to the list. This
    should keep some of us from having to delete 50 or more messages about a
    non-existant virus.

    Marc Fossi, MCSE
    SecurityFocus
    www.securityfocus.com

    On Thu, 13 Sep 2001, Jon Saultz wrote:

    > FYI:
    > Attention: I have gotten 2 of these warnings now from MIME virus protection:
    > One of the people sending replies to this list has some kind of VBS
    > virus.(love letter type)
    >
    > McAfee detected a virus in a message addressed to you from
    > focus-ms-return-1597-jsaultz=ci.colospgs.co.ussecurityfocus.com.
    > The subject of the message is RE: Locked out users, dated Thu, 13 Sep 2001
    > 14:24:57 -0700.
    >
    > -----Original Message-----
    > From: H C [mailto:keydet89yahoo.com]
    > Sent: Thursday, September 13, 2001 3:12 PM
    > To: haji din; focus-mssecurityfocus.com
    > Subject: Re: Locked out users
    >
    > If all you need is the locked out users, I can write
    > you one in Perl, and even provide it as an executable.
    >
    >
    > What format do you need the output in?
    >
    > > Is there a tool or command line that lists "account
    > > locked out" like rasusers.exe which lists remote
    > > access users on Nt Server 4.0.
    >
    >
    >
    > __________________________________________________
    > Terrorist Attacks on U.S. - How can you help?
    > Donate cash, emergency relief information
    > http://dailynews.yahoo.com/fc/US/Emergency_Information/
    >