Topic awaiting preservation: SoBig worm, one more virus

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

The thing with all this spam is...one address really worried me...a spam virus email from webmaster@gurusnetwork.com

The worm, if executed (if you ran the attachment), finds emails in your address book and pretends that it came from them. If you didn't run the attachment, perhaps webmaster@gurusnetwork.com is infected...?

I hope not...that'd probably mean that runningwolf in infected...wonder if Pugz knows about this.

oh well...I didn't open any of the emails...just deleted all 287 of them.

I didn't realise that many people had me in various places on their HDDs....

This is also a reason why I keep my address book in my head an on paper...never in a digital format.

I heard from the news on Friday that if this virus could really make the whole internet run slow all over the world. And that scares me.

i already got tons of these sobig f e-mails...fortunately i never opened the attachements

PORTFOLIO0

Skaarjj -

You think it worried you? I got all the bounce messages! More than 100 PER MINUTE for about 12 hours!

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

honestly, we need electro-shock mouses...

click on an 'prepared' attachment -> bzzz.

I've been receiving a lot of bounce e-mails from mail servers that are running really brain dead spam/virus checkers. The main rule of thumb is to send bounces only to *local* users (users that have accounts on the mail server in question). But, even if people in charge of specific mail server decide to send bounces to everybody, they should at least use spam/virus checker that knows which viruses fake sender address in which case, bounce message is useless and just consumes bandwidth. Unfortunately, a lot of mail servers are either improperly configured or running brain dead spam/virus checkers (as said above)...

BTW Interesting fact about W32/Sobig.F@mm worm is that it has ability to synchronize attacks (it can contact internet atomic clocks via NTP protocol). More about this: http://www.f-prot.com/news/vir_alert/sobig_f.html




[This message has been edited by mr.maX (edited 08-26-2003).]

I bet this question has been answered already but I am just getting to this now- I am at my client’s computer and trying to figure out how to solve the sobig.f spam emails we are getting. What did you guys do to stop the spamming? Delete existing emails and re-create new ones?

I currently have info@hisdomainname. Can I simply replace that with information@hisdomainmname ?

Thanks.
CRO8

just read this on symantic website:

quote:

---

The worm de-activates on September 10, 2003. The last day on which the worm will spread is September 9, 2003.

---

[This message has been edited by CRO8 (edited 08-30-2003).]