anomy-list

RE: About ... doc.lnk

From: Lazur, Eric (15325@xyz.molar.is)
Date: Fri 03 Aug 2001 - 19:09:14 UTC

  • Next message: Sergio J Rojas H: "RE: About ... doc.lnk"

    This has seemed to work for me
    file_list_1_scanner = 0
    file_list_1_policy = save
    file_list_1 = (?i)(winmail\.dat
    file_list_1 += |\.(exe|vb[es]|c(om|hm)|bat|pif|lnk|s(ys|cr))
    file_list_1 += |(\.g?z|\.bz\d?)*)$

    But I am having a problem where it is saying
    ****
    NOTE: An attachment was deleted from this part of the message,
    because it failed one or more checks by the virus scanning system.
    The file has been quarantined on the mail server, with the following
    file name:

            att-unnamed.txt-3b6aef80.JX

    The removed attachment's original name was:

            unnamed.txt

    It is recommended that you contact your system administrator if you
    need access to the file. It might also be a good idea to contact the
    sender, and warn them that their system may be infected.
    ****
    For every email. I get this no matter what is in the body of the message.

    Eric LaZur
    Senior Infrastructure Engineer
    eCAMPUS.com
    (859) 514-5200
    http://www.ecampus.com
    email: 15413@xyz.molar.is

    -----Original Message-----
    From: Sergio J Rojas H [mailto:15451@xyz.molar.is]
    Sent: Friday, August 03, 2001 1:27 PM
    To: Romek
    Cc: 15363@xyz.molar.is
    Subject: Re: [anomy-list]: About ... doc.lnk

     Hello!

     Yes I know!, but i set on a drop policies .lnk, but it doesn't work.
    Don't block doc.lnk attachments.

     How can I block that?

     Thanx in advance!
     

             __o
            _`\<,_
           (*)/ (*)
    /\/\/\/\/\/\/\/\/\/\
                        \
     Sergio J Rojas H \(*)|\
     Direccion de Sistemas\ --_\o
     Proeza y Asociados \(*)!
                            \
     Tel 54802659 \
     ICQ 44935299 \
     15451@xyz.molar.is \/\/\/\/\/\
     http://www.proezayasoc.com.mx/~srojas
     There are not problems, only solutions

    On Fri, 3 Aug 2001, Romek wrote:

    >
    > .doc.lnk is a Sircam.worm - better do not open it.
    >
    >
    > At 21:35 02-08-01 -0500, you wrote:
    > >
    > > Hello everybody!
    > >
    > > Can Anybody send me how block .doc.lnk attachments.
    > >
    > > I see this thread, today.
    > >
    > > But i made a mistake and delete that messages ..
    > >
    > > Thanx in advance...
    > >
    > > __o
    > > _`\<,_
    > > (*)/ (*)
    >
    > --
    > Romek Zylla
    > ~~~~~~~~~~~ after all the work done by Micro$oft (R) ~~~~~~~~~~
    > Personal Computer Science is an experimental one (C)
    > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >



    hosted by molar.is