RE: [Declude.Virus] SoBig.f email coming through

2003-08-20 Thread John Tolmachoff \(Lists\)
.Virus- > [EMAIL PROTECTED] On Behalf Of Rodney Bertsch > Sent: Wednesday, August 20, 2003 6:27 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] SoBig.f email coming through > > I understand that SoBig comes with a .pif attachment. I have .pif files > among my banned

RE: [Declude.Virus] SoBig.f email coming through

2003-08-20 Thread Rodney Bertsch
I understand that SoBig comes with a .pif attachment. I have .pif files among my banned extensions but haven't seen a single incident of this virus coming in. It hasn't been caught as a virus or a banned extension. Are we just extremely lucky or should I be worried I'm missing something? No rep

Re: [Declude.Virus] SoBig.f email coming through

2003-08-20 Thread Paul Ingram
Hello, It seems I am getting the Sobig email coming throught to my users but with ot a payload. In other words tey are getting the message with all chaistics of SoBig.f but no attachment. Anyone know why this maybe. I can not filter on some of the subject such as 'd e t a i l s ... o

RE: [Declude.Virus] Sobig.f

2003-08-19 Thread Andy Schmidt
I just checked - we caught >4,700 occurrences of this virus so far since this morning at 8:31 AM EDT. This is by a huge margin the most aggressive virus that I've ever observed. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scann

Re: [Declude.Virus] Sobig.F

2003-08-19 Thread Dan Geiser
Forget it. I finally got through to McAfee's web site. Sorry for bothering y'all!!! - Original Message - From: "Dan Geiser" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 19, 2003 5:12 PM Subject: Re: [Declude.Virus] Sobig.F > Can

Re: [Declude.Virus] Sobig.F

2003-08-19 Thread Bill Landry
: <[EMAIL PROTECTED]> Sent: Tuesday, August 19, 2003 2:12 PM Subject: Re: [Declude.Virus] Sobig.F > Can anyone share the McAfee definition files for this? Our's is currently > at 4286 and I can't get in manually or automatically to download the current > definition

Re: [Declude.Virus] Sobig.F

2003-08-19 Thread Dan Geiser
AIL PROTECTED]> Sent: Tuesday, August 19, 2003 1:42 PM Subject: Re: [Declude.Virus] Sobig.F > McAfee is catching it fine here. Make sure your virus definitions are at > least at 4.0.4287. > > Bill > - Original Message - > From: "Bill Newberg" <[EMAIL PROTECTED]

RE: [Declude.Virus] Sobig.F [OT]

2003-08-19 Thread Jeff Maze - Hostmaster
Sent: Tuesday, August 19, 2003 2:32 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Sobig.F [OT] I have to concur on this, we are seeing our traffic levels increased by a factor of 7 due to this virus.. Darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTE

RE: [Declude.Virus] Sobig.F [OT]

2003-08-19 Thread Darrell LaRock
I have to concur on this, we are seeing our traffic levels increased by a factor of 7 due to this virus.. Darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Tuesday, August 19, 2003 3:25 PM To: [EMAIL PROTECTED] Subject:

RE: [Declude.Virus] Sobig.F

2003-08-19 Thread Andy Schmidt
Mc Afee was blocking Sobig.f as of 8:31 AM Eastern Time on my server according to my Declude Log files before I read the first reports on this list. Are your virus signatures up to date/hour. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle Riv

Re: [Declude.Virus] Sobig.F

2003-08-19 Thread Bill Landry
McAfee is catching it fine here. Make sure your virus definitions are at least at 4.0.4287. Bill - Original Message - From: "Bill Newberg" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 19, 2003 10:29 AM Subject: [Declude.Virus] Sobig.F F-Prot is catching Sobig.F, bu

RE: [Declude.Virus] SoBig.F

2003-08-19 Thread Adolfo Justiniano
Hello Andy, >I used McAfee and it started blocking it since 8:31 EDT (I pull in their >daily updates hourly). How do you pull the updates hourly? I use the Instant Updater but it looks that it does the updates just once per day. Adolfo Justiniano Santa Cruz BBS e-mail: [EMAIL PROTECTED] http://w

RE: [Declude.Virus] SoBig.F?

2003-08-19 Thread Karen D. Oland
: U X-UIDL: 300613514 > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andy Schmidt > Sent: Tuesday, August 19, 2003 11:32 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] SoBig.F > > > Hi Scott: > > I used McAfee a

RE: [Declude.Virus] SoBig.F

2003-08-19 Thread Andy Schmidt
Hi Scott: I used McAfee and it started blocking it since 8:31 EDT (I pull in their daily updates hourly). 08/19/2003 08:31:18 Q1893028b01baf614 Scanner 1: Virus= the W32/[EMAIL PROTECTED] virus !!! Attachment=details.pif [11] I 08/19/2003 08:31:18 Q1893028b01baf614 Found a bogus .pif file 08/19/2