Re: [OT] Machine invected by sobig.f?

Also, looks like F-Secure prevented the attack that was to happen at
19:00 UTC today.

http://www.f-secure.com/v-descs/sobig_f.shtml

On Fri, 2003-08-22 at 14:25, Kurt Hansen wrote:
> Hi,
> 
> I think someone who is currently on the Mason mailing list or who used 
> to be on the list has a machine that is infected by the sobig.f virus. 
> I'm getting emails every 10-15 minutes that are all routed through this 
> machine
> 
> (ANYONE ON DSL FROM PACBELL OR SBC TAKE NOTE):
> 
> adsl-64-165-59-130.dsl.snfc21.pacbell.net (HELO TNGO) (64.165.59.130)
> 
> Maybe in California, especially the Bay Area?
> 
> The connection to the Mason list is that I have gotten infected emails 
> with return addresses of swartz@xxxxxxxxxxxx ;-) and 
> jfrisby@xxxxxxxxxxxx, two addresses I've only seen in connection with Mason.
> 
> I stopped getting the emails late last night and then they picked up at 
> noon (Eastern US) today, suggesting a machine that was turned off 
> overnight on the US West Coast.
> 
> If this circumstantial evidence sounds like you, please check your machine.
> 
> The rest of you can go back to telling Norton AV to quarantine the 
> infected mail... :-)
> 
> Take care,
> 
> Kurt Hansen
> khansen@xxxxxxxxxxxxxx
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
> at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
> _______________________________________________
> Mason-users mailing list
> Mason-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/mason-users
-- 
K Old <kold@xxxxxxxxxxxxxxxxxx>



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0