Re[2]: [Declude.Virus] SoBig more prolific now?
If I where you and the infected machine connected directly to your mailserver I would create a BAN in Imail for this ip to prevent it to even connect and send anything to your server. / Eje Monday, September 8, 2003, 5:28:14 AM, you wrote: JP I have sort of resigned myself to just continue deleting them as they come JP in. JP Hopefully they will actually stop on the 20th. JP jp JP - Original Message - JP From: Hermann Strassner [EMAIL PROTECTED] JP To: [EMAIL PROTECTED] JP Sent: Monday, September 08, 2003 3:59 AM JP Subject: RE: [Declude.Virus] SoBig more prolific now? were sent to a single address on my domain at the rate of about 1 per minute. Does anyone know how fast it sends? Does it have anything to do with the speed of the infected computer? I'm just curious. I think it depends on the speed of the internet connection, and if it is fast enough, from the speed of the PC. Hermann --- [This E-mail was scanned for viruses by Declude Virus JP (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JP --- JP This E-mail came from the Declude.Virus mailing list. To JP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JP type unsubscribe Declude.Virus.The archives can be found JP at http://www.mail-archive.com. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network eFax : 240-376-7272 Phone : 620-231- Fax : 620-231-4066 Online Store http://www.fament.com/catalog/ - Your Full Time Professionals - -- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.Virus] SoBig more prolific now?
I'm tired of doing that - Original Message - From: Eje Gustafsson [EMAIL PROTECTED] To: Jeff Pereira [EMAIL PROTECTED] Sent: Monday, September 08, 2003 10:42 AM Subject: Re[2]: [Declude.Virus] SoBig more prolific now? If I where you and the infected machine connected directly to your mailserver I would create a BAN in Imail for this ip to prevent it to even connect and send anything to your server. / Eje Monday, September 8, 2003, 5:28:14 AM, you wrote: JP I have sort of resigned myself to just continue deleting them as they come JP in. JP Hopefully they will actually stop on the 20th. JP jp JP - Original Message - JP From: Hermann Strassner [EMAIL PROTECTED] JP To: [EMAIL PROTECTED] JP Sent: Monday, September 08, 2003 3:59 AM JP Subject: RE: [Declude.Virus] SoBig more prolific now? were sent to a single address on my domain at the rate of about 1 per minute. Does anyone know how fast it sends? Does it have anything to do with the speed of the infected computer? I'm just curious. I think it depends on the speed of the internet connection, and if it is fast enough, from the speed of the PC. Hermann --- [This E-mail was scanned for viruses by Declude Virus JP (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JP --- JP This E-mail came from the Declude.Virus mailing list. To JP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JP type unsubscribe Declude.Virus.The archives can be found JP at http://www.mail-archive.com. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network eFax : 240-376-7272 Phone : 620-231- Fax : 620-231-4066 Online Store http://www.fament.com/catalog/ - Your Full Time Professionals - -- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.Virus] SoBig more prolific now?
I have been doing that, but I have heard that IMAIL's CAL can only handle 100 IPS and I am running at about 90 now. Most of the offenders are from Optimum online, I could block their whole IP range, but then I think my home Optimum users trying to POP or SMTP (maybe even Webmail)won't be able to connect to my machine. I can use the Declude IP blacklist, but that is not removing the processing time required. When I get hit like I did on Friday, I call and e-mail Optimum, but they really haven't done anything. Usually within 2 or 3 days I get more SOBIGS from the same machine (HIPHOPSOUNDS) name with a slightly different IP. So when the cable modem keeps getting a different IP from cable the machine can then blast me again You would think Optimum would know who has leased an IP and then contact them, just in the interest of protecting their own network. Stupid virus. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eje Gustafsson Sent: Monday, September 08, 2003 10:43 AM To: Jeff Pereira Subject: Re[2]: [Declude.Virus] SoBig more prolific now? If I where you and the infected machine connected directly to your mailserver I would create a BAN in Imail for this ip to prevent it to even connect and send anything to your server. / Eje Monday, September 8, 2003, 5:28:14 AM, you wrote: JP I have sort of resigned myself to just continue deleting them as they come JP in. JP Hopefully they will actually stop on the 20th. JP jp JP - Original Message - JP From: Hermann Strassner [EMAIL PROTECTED] JP To: [EMAIL PROTECTED] JP Sent: Monday, September 08, 2003 3:59 AM JP Subject: RE: [Declude.Virus] SoBig more prolific now? were sent to a single address on my domain at the rate of about 1 per minute. Does anyone know how fast it sends? Does it have anything to do with the speed of the infected computer? I'm just curious. I think it depends on the speed of the internet connection, and if it is fast enough, from the speed of the PC. Hermann --- [This E-mail was scanned for viruses by Declude Virus JP (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail scanned for viruses by Declude Virus] JP --- JP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JP --- JP This E-mail came from the Declude.Virus mailing list. To JP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JP type unsubscribe Declude.Virus.The archives can be found JP at http://www.mail-archive.com. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network eFax : 240-376-7272 Phone : 620-231- Fax : 620-231-4066 Online Store http://www.fament.com/catalog/ - Your Full Time Professionals - -- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] SoBig more prolific now?
Last night I got hammered with about 3,000 sobigs in the course of about 2 hours from one infected computer - it seems this particular computer had almost every address from my domain on it. This morning I got about 100 from another computer - the strange thing was that all 100 were sent to a single address on my domain at the rate of about 1 per minute. Does anyone know how fast it sends? Does it have anything to do with the speed of the infected computer? I'm just curious. When will people stop opening this attachment.? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] SoBig more prolific now?
There ain't no cure for stupidity. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
