Curiosity got to me, so I checked.
LOL
All from one IP.
Header says: (with spaces added)
Subject: Re: A p p r o v e d
Date: Sun, 24 Aug 2003 20:20:14 +0530
X-M a I l S c a n n e r : F o u n d t o b e c l e a n
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_026863AF"
He's got the date on his computer wrong.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Hermann Strassner
> Sent: Thursday, September 11, 2003 8:05 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] Did SOBIG REALLY stop?
>
> Not 1 sobig.f in the last 38 hours.
>
> Hermann
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Donn Bly
> > Sent: Thursday, September 11, 2003 4:43 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [Declude.Virus] Did SOBIG REALLY stop?
> >
> >
> > Every SoBig.F virus I have received in the past 32 hours has been
> > part of a
> > failure notification, where the message is returned because it
> > never reached
> > its intended recipient.
> >
> > The biggest offenders I blocked at our border routers, and I'm not
seeing
> > the counters on the access list go up anymore.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
