On Fri, May 13, 2005 at 12:28:35PM -0500, Daniel J McDonald wrote:
> On Fri, 2005-05-13 at 13:21 -0400, Bowie Bailey wrote:
> > Is it just me, or did this virus disappear completely? I have not seen a
> > single instance of Sober.P since 8pm on May 9. This seems very strange to
> > me. I was getting 5-10 per hour up until that point.
>
> Yes, except that I was seeing 5-10 per minute.
Yes, except that I was seeing 60 per second, or about 40% or our total
incoming mail flow.
It looks like the Sober.P virus has a termination date, just like the
previous Sober variants had. The cutoff date is suspiciously close to
Tue May 10 2005, 0:00 UTC.
So instead of virus spewing zombies, the infected PCs are now probably
spam spewing zombies, or waiting for something to turn them into spam
zombies.
--
#!perl -wpl # mmfppfmpmmpp mmpffm <[EMAIL PROTECTED]>
$p=3-2*/[^\W\dmpf_]/i;s.[a-z]{$p}.vec($f=join('',$p-1?chr(sub{$_[0]*9+$_[1]*3+
$_[2]}->(map{/p|f/i+/f/i}split//,$&)+97):qw(m p f)[map{((ord$&)%32-1)/$_%3}(9,
3,1)]),5,1)='`'lt$&;$f.eig; # Jan-Pieter Cornet
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
