Hello,
It seems I am getting the Sobig email coming throught to my users
but with ot a payload. In other words tey are getting the message
with all chaistics of SoBig.f but no attachment.
Anyone know why this maybe. I can not filter on some of the subject
such as 'd e t a i l s ...
I understand that SoBig comes with a .pif attachment. I have .pif files
among my banned extensions but haven't seen a single incident of this virus
coming in. It hasn't been caught as a virus or a banned extension. Are we
just extremely lucky or should I be worried I'm missing something? No
-
[EMAIL PROTECTED] On Behalf Of Rodney Bertsch
Sent: Wednesday, August 20, 2003 6:27 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] SoBig.f email coming through
I understand that SoBig comes with a .pif attachment. I have .pif files
among my banned extensions but haven't seen a single
Hi Scott:
I used McAfee and it started blocking it since 8:31 EDT (I pull in their
daily updates hourly).
08/19/2003 08:31:18 Q1893028b01baf614 Scanner 1: Virus= the W32/[EMAIL PROTECTED]
virus !!! Attachment=details.pif [11] I
08/19/2003 08:31:18 Q1893028b01baf614 Found a bogus .pif file
PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Andy Schmidt
Sent: Tuesday, August 19, 2003 11:32 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] SoBig.F
Hi Scott:
I used McAfee and it started blocking it since 8:31 EDT (I pull in their
daily updates hourly).
08/19/2003 08:31:18
Hello Andy,
I used McAfee and it started blocking it since 8:31 EDT (I pull in
their
daily updates hourly).
How do you pull the updates hourly? I use the Instant Updater but it
looks that it does the updates just once per day.
Adolfo Justiniano
Santa Cruz BBS
e-mail: [EMAIL PROTECTED]
McAfee is catching it fine here. Make sure your virus definitions are at
least at 4.0.4287.
Bill
- Original Message -
From: Bill Newberg [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 19, 2003 10:29 AM
Subject: [Declude.Virus] Sobig.F
F-Prot is catching Sobig.F, but
Mc Afee was blocking Sobig.f as of 8:31 AM Eastern Time on my server
according to my Declude Log files before I read the first reports on this
list. Are your virus signatures up to date/hour.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle
I have to concur on this, we are seeing our traffic levels increased by a
factor of 7 due to this virus..
Darrell
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster
Sent: Tuesday, August 19, 2003 3:25 PM
To: [EMAIL PROTECTED]
Subject:
: Tuesday, August 19, 2003 2:32 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Sobig.F [OT]
I have to concur on this, we are seeing our traffic levels increased by a
factor of 7 due to this virus..
Darrell
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
, 2003 1:42 PM
Subject: Re: [Declude.Virus] Sobig.F
McAfee is catching it fine here. Make sure your virus definitions are at
least at 4.0.4287.
Bill
- Original Message -
From: Bill Newberg [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 19, 2003 10:29 AM
Subject
, August 19, 2003 2:12 PM
Subject: Re: [Declude.Virus] Sobig.F
Can anyone share the McAfee definition files for this? Our's is currently
at 4286 and I can't get in manually or automatically to download the
current
definition files.
Thanks,
Dan
- Original Message -
From: Bill
Forget it. I finally got through to McAfee's web site.
Sorry for bothering y'all!!!
- Original Message -
From: Dan Geiser [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 19, 2003 5:12 PM
Subject: Re: [Declude.Virus] Sobig.F
Can anyone share the McAfee definition files
I just checked - we caught 4,700 occurrences of this virus so far since
this morning at 8:31 AM EDT. This is by a huge margin the most aggressive
virus that I've ever observed.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was
14 matches
Mail list logo
