Time to find out which people it is and shut them down.. Disable web access and the account and watch them scramble.. hahaha
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Friday, September 05, 2003 3:40 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Anyone else getting hit hard today with Sobig.F again? > here are my server stats since the day before SoBig-f hit up till last > nights log rollover http://www.cfhosting.net/virus.scan.txt > Ouch. You have outgoing Sobig? I've not seen 1 outbound sobig <yet> As of today, we've gotten this for the month... it's only the 5th! Virus Summary by Count --------------------------------------- Count Inbound/Outbound Name 16,862 16,862 / 0 W32/[EMAIL PROTECTED] - 54,316 was the total in August. 182 182 / 0 W32/[EMAIL PROTECTED] 152 138 / 14 W32/[EMAIL PROTECTED] 18 18 / 0 W32/[EMAIL PROTECTED] 14 2 / 12 W32/Hybris.worm.B 9 9 / 0 W32/[EMAIL PROTECTED] (corrupted) 8 8 / 0 W32/[EMAIL PROTECTED] 6 3 / 3 W32/Hybris.worm.D 2 2 / 0 W32/[EMAIL PROTECTED] 1 0 / 1 JS/[EMAIL PROTECTED] 1 1 / 0 W32/[EMAIL PROTECTED] 1 1 / 0 VBS/Lovelorn.dropper If only I could get the users with that dang Klez to clean their systems, as well as the Hybris. It's the same 3 or 4 people..... over and over..... Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
