[PD] What I know about this f****ing worm

Christian Klippel ck at mamalala.de
Wed Nov 28 18:11:49 CET 2001


hi yves, hi list,

sorry for that small off-topic posting.
yes. there is a new worm on its way, my server already struggled
from that in the past two days.
i for myself will block any outlook mails in the future on my server.
_before_ they are transfered, to save bandwidth. (simply checking
the header for "Outlook" and "X-MSMail")
maybe the listadmin here has a similar intention ?? if so, feel free to
contact me about that.
its a crude and draconian method, i know, but hey, there are tons
of other mailers for win out there, that doesnt spread worms and virii.
and upgrading a mail server to scan all mails comming in means spending
huge amount of $$$ just because of crappy software out there. this cant 
be the solution. i tried it, and my experience say, that you need at least
4 times the cpu and ram power as normal if you want to scan all mails.
(you have to load and run the antivir-proggy for _each_ mail, and imagine
there are suddenly 100 mails at once ... so you need to load the av soft
100 times, too !)

greets,

chris


Am Mittwoch, 28. November 2001 12:52 schrieb Yves Degoyon:
> hi,
>
> sorry, I was infected by this f****ing worm,
> seemed to be FunLove, signature is :
>
> 1002sono: fsav (linux) virus (11828-54)
>
> the scanning of my hard drive cleaned the following files :
>
> c:\Windows\virscana.exe
> c:\1002sono
> c:\1017hist
> c:\1020hist
>
> Check if you've got them.
>
> I will check a virus site to
> know more about it.
>
> cheers,
>
> Yves/

----------------------------------------
Content-Type: text/html; charset="iso-8859-1"; name="Anhang: 1"
Content-Transfer-Encoding: quoted-printable
Content-Description: 
----------------------------------------

-- 
visit me:
http://mamalala.de - jmax audio related
http://video.mamalala.de - jmax video related
irc.openprojects.net - channel #jmax



More information about the Pd-list mailing list