Looks like at least one of the scanners out there can detect the virus. Tried to send it to myself from my sonic.net account to my work account and it was blocked by either the sonic.net server or the Postini server.
Which means that the original message that was sent to me originated inside the firm. I know which system it came from most likely as I found it on one system previously today, but not before it sent out a bunch of emails.
The question still remains though, how did the original message that caused the infection make it into our email system?
Perhaps we should move to running TrendMicro or F-Secure on either our mail systems or our desktops for another level of virus security. As this is another example of how you can't depend on one vendor to give you complete security.
I actually want you to help notes on Mis viruses on files and more.
Posted by: Ansumana | Thursday, April 14, 2005 at 05:59 AM