Actually, yes...I have.

I work for one of the prime contractors at the Hanford Nuclear Reservation
in SE Washington St, which is run by the Dept of Energy.

-----Original Message-----
From: John Matteson [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 25, 2003 12:39 PM
To: Exchange Discussions
Subject: RE: Sobig.F alert


You've never tried purchasing a computer for the government have you?

John Matteson
Geac Corporate ISS
(404) 239 - 2981
Atlanta, Georgia, USA.



-----Original Message-----
From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] 
Posted At: Monday, August 25, 2003 3:30 PM
Posted To: Exchange Discussion List
Conversation: Sobig.F alert
Subject: RE: Sobig.F alert


It shouldn't...but yes, it does.

I mean, come on.  For the cost of a $250 PC and a $50 copy of RedHat 9.0
(actually, a recycled PII or PII would do), thrown in front of every access
point to the network, they could be blocking every attachment on the Martin
Blackstone list!

BAS!

-----Original Message-----
From: Couch, Nate [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 25, 2003 12:20 PM
To: Exchange Discussions
Subject: RE: Sobig.F alert


And this surprises you???

> ----------
> From:         Blunt, James H (Jim)
> Reply To:     Exchange Discussions
> Sent:         Monday, August 25, 2003 1:21 PM
> To:   Exchange Discussions
> Subject:      RE: Sobig.F alert
> 
> I was SOOOO disgusted on Friday with our federal government's 
> anti-virus policy!!
> 
> I had to make a trip over to the passport office in Seattle to get a 
> new passport for the wife, who was leaving on a 1:23pm flight that day

> for Chile.  The passport office is an office of the Department of
> State.  Does the Department of State computer security full under the 
> jurisdiction of the Office of Homeland Security?  One would think so.
> 
> We had just made plane reservations with a credit card, received a 
> confirmation number, but for some reason the airline couldn't send us 
> a fax...I'm guessing they had their outside link to the world cut off 
> for security.
> 
> We get to the passport office on Friday morning, only to have them 
> tell us that they couldn't process our request with just a 
> confirmation number, due to the fact that the State Dept.'s computer 
> network was down due to the Sobig.f virus!!!  AAAAArrrggghh!!
> 
> Absolutely disgusting, shoddy, second-rate governmental attitude 
> strikes again!
> 
> -----Original Message-----
> From: Martin Blackstone [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 12:47 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> 
> I'm blaming the pizza I just had for the big jump in gas.
> 
> -----Original Message-----
> From: Bill Kuhl [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 12:39 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> Can we blame this virus for the big jump in gas prices today?
> 
> -----Original Message-----
> From: Sagert, Lori [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 2:18 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> 
> Me too. Oh well, now we can still go the bar after work instead of 
> staying and fighting viruses all nite.
> 
> -----Original Message-----
> From: Christopher Hummert [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 3:13 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> 
> This is the most anti climactic virus ever. I want my money back
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb
> Sent: Friday, August 22, 2003 12:13 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> 
> Looks like my upstream has killed routes the all of these....way to go 
> ISP.
> 
> -----Original Message-----
> From: Scott Force [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 2:09 PM
> To: Exchange Discussions
> Subject: RE: Sobig.F alert
> 
> 
> 68.38.159.161 and 65.95.193.138 seem to be the last two standing 
> unless ICMP is turned off on some of the other servers/pc's.
> 
> 
> > Because that really wouldn't matter, the theory is that the infect 
> > machines are going to get their instructions from these 20 masters 
> > servers and then launch a distributed attack on the root DNS 
> > servers......1 minute left
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Mellott, 
> > Bill
> > Sent: Friday, August 22, 2003 12:01 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > well's that where My q came in....Chris even put up a piece which 
> > said
> 
> > they new about 20 servers ..18 OFFL, 2 ONL
> > 
> > so then they have ID'd these things right? why not publish the IP 
> > and/or the domain names ..so people could block these too... it just

> > say's about UDP port ..couldnt that also change on the fly?
> > 
> > bill
> > 
> > -----Original Message-----
> > From: Steck, Herb [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 2:59 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > wouldve been nice for them to publish the IP list so we could block 
> > it
> 
> > from our firewalls.  Incoming and outgoing.
> > 
> > -----Original Message-----
> > From: Christopher Hummert [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 1:52 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > If only Arnold wasn't running for governor. We could send him back 
> > in time to stop Skynet.
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb
> > Sent: Friday, August 22, 2003 11:52 AM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > As if we all didn't have enough to do?
> > 
> > -----Original Message-----
> > From: Matt Plahtinsky [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 1:51 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > T-minus 10 minutes .....   Its the end of the world run for your
> > lives...................
> > 
> > -----Original Message-----
> > From: Sagert, Lori [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 2:41 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > Yes it is. Since we are not sure what the payload is, we patched for 
> > the new MDAC security patch. Hey, who knows? Better to be safe than 
> > sorry.
> > 
> > T-minus 20 minutes.....
> > 
> > -----Original Message-----
> > From: Christopher Hummert [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 2:33 PM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > Oh crap, I didn't think that anyone actually hooked Skynet up to the 
> > internet.
> > 
> > T-Minus 30 minutes
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Matt 
> > Plahtinsky
> > Sent: Friday, August 22, 2003 11:33 AM
> > To: Exchange Discussions
> > Subject: RE: Sobig.F alert
> > 
> > 
> > Here is some more info on it. Should be an interesting afternoon.
> > 
> > http://www.theregister.co.uk/content/56/32475.html
> > 
> > http://story.news.yahoo.com/news?tmpl=story&ncid=1211&e=1&u=/nm/2003
> > 08
> > 22
> > /tc_nm/tech_internet_virus_dc&sid=95573372
> > 
> > -----Original Message-----
> > From: Lori Sagert [mailto:[EMAIL PROTECTED]
> > Sent: Friday, August 22, 2003 1:56 PM
> > To: Exchange Discussions
> > Subject: Sobig.F alert
> > 
> > 
> > FYI...
> > 
> > http://www.f-secure.com/news/items/news_2003082200.shtml
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang
> > =english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > "The information transmitted is intended only for the person or 
> > entity
> 
> > to which it is addressed and may contain proprietary, confidential 
> > and/or legally privileged material. Any review, retransmission, 
> > dissemination or other use of, or taking of any action in reliance 
> > upon, this information by persons or entities other than the 
> > intended recipient is prohibited. If you received this in error, 
> > please contact
> 
> > the sender and delete the material from all computers."
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang
> > =english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > "The information transmitted is intended only for the person or 
> > entity
> 
> > to which it is addressed and may contain proprietary, confidential 
> > and/or legally privileged material. Any review, retransmission, 
> > dissemination or other use of, or taking of any action in reliance 
> > upon, this information by persons or entities other than the 
> > intended recipient is prohibited. If you received this in error, 
> > please contact
> 
> > the sender and delete the material from all computers."
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang
> > =english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mo
> > de
> > =&
> > lang=english
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&
> lang=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> "The information transmitted is intended only for the person or entity 
> to which it is addressed and may contain proprietary, confidential 
> and/or legally privileged material. Any review, retransmission, 
> dissemination or other use of, or taking of any action in reliance 
> upon, this information by persons or entities other than the intended 
> recipient is prohibited. If you received this in error, please contact 
> the sender and delete the
material
> from all computers."
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&
> lang=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&la
> ng
> =english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&la
> ng
> =english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&la
> ng
> =english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&la
> ng
> =english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&la
> ng=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to