Hallo zusammen I manage a few 'scouting' mailservers in switzerland. Two days ago we started to get a Klez.E virus about every five minutes on various addresses.
That wouldn't be too bad, i blocked that IP on most server, but other people start getting viruses with our adresses as senders and complain back to me. The originate all from the same IP: 212.117.127.91 inetnum: 212.117.96.0 - 212.117.127.255 netname: CH-SFIB-991130 descr: SFIB Schweizerische Fachstelle descr: fuer Informationstechnologien descr: im Bildungswesen SFIB The Virus are all sent from the internal IP: 192.168.2.50 But the SFIB Responsible itself has not information from which of the few hundres schools this virus is sent from and gave me a contact at swisscom. The Swisscom Guy again told me he is not allowed to tell me which school this IP belongs to, but he would call them asap and tell them to disconnect that computer. That happened yesterday around 17:00. Guess what: Today around 10:00 the infected computer is online and starting to spam it's virus again. Could somebody at swisscom please disconnect that school from the net and tell them how to install a virusscanner (or even install Linux or similar which has a better educational value) :-) Regards -Benoit Panizzon- ---------------------------------------------- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/
