Hello, Thought you people would like to know about the following :
The other day an exec downloaded a message pretending to be from UPS, informing him that if he does not answer the message, a package he is waiting will get lost. Anyway, the exec opened the message. Inside the message was a Trojan. A very nasty one : "XP Antivirus Professional" claimed that is was. Naturally, it was nothing else than a very - VERY nasty trojan. I tried to take it away, but I had to re-install (about 40Gb of data to be backed-up plus 3,5Gb of a .pst file for outlook 2007). After spending one day of re-installing, I thought I should go to the ASSP interface and have a look why, WHY did it let that specific message get through. The incident took place on either the 4th of the 5th of March, so I tried to access the logs back to that date. I couldn't (!?) The logs will go back to the 8th of March. Watching the logs, I realized that tens of messages have to tried to pass this "UPS" subject line to various users inside the network, but all got (correctly) marked as SP*M. So I still tried to access the 4/3 and 5/3 to find the message and pass it through the mail analyzer. The only thing I managed to do (here comes the description for the crash incident), is instruct the system to check all the log files. Then ASSP crashed and its process stopped functioning. I would really appreciate if someone could shed some light on this. I really have to hunt this down and resolve it. If everytime this happens (users are no clever people, I have established that since ages ago), , I will end-up wasting my time doing re-installations of windows XP around the offices. Some data : ASSP v1.6.5.4(1.0.0.4) Slackware Linux v12.0 on an Intel [email protected] 2Gb of RAM 80Gb IDE/ATAPI HITACHI HDD PERL v5.10.0 built for i486-linux-thread-multi uname -a : 2.6.27.7-smp #2 SMP Thu Nov 20 22:32:43 CST 2008 i686 Intel(R) Celeron(R) CPU 3.06GHz GenuineIntel GNU/Linux Any help would be appreciated, TIA, spyros ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
