I wrote a script that will send a DOS "Net send" message" in the offchance that their compromised system even still has messaging services running. Surprisingly about 65% of them do and the on-screen message is displayed on their computer.
The message is along the lines of "Your computer is compromised by the xxx virus. Please immediately take it off-line and clean it up. Thank you. No one can even trace the net send messages, and my system is reporting that 65% of them are delivered successfully. ====================================== Stop spam on your domain, use our gateway! For hosting solutions http://www.clickdoug.com ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772 ====================================== If you are not satisfied with my service, my job isn't done! ----- Original Message ----- From: "Michael Dinowitz" <[EMAIL PROTECTED]> To: "CF-Community" <[EMAIL PROTECTED]> Sent: Wednesday, August 20, 2003 2:21 PM Subject: Clean off | <CF_Rant> | I tried to be good. I really did. I hunted down the domains the owned the IP addresses that are sending the virus spam. I called them. I told them exactly what IPs are sending the spam. Their response? Send an email to their abuse address with the information. | I'm on the phone with the information. I'm telling them everything and they are either so clueless or so lazy that they can't just write the information down. I'm talking about techs here. I'm not happy. I'd expect more out of my own people. I'd expect them to say "ok, I see the server in question, I see the mail spikes coming from it. I've killed the virus. Have a nice day". It really is that simple. If they wanted to take the effort. | Schmucks | </CF_Rant> | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:5 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5 Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm
