[Dshield] Virus emails

Doug White doug at clickdoug.com
Wed Jan 28 22:21:01 GMT 2004


I am using this as a temporary fix as each infected computer appears to be
sending about 10-20 copies per hour to the server.

======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
Aspire to Inspire before you Retire or Expire!


----- Original Message ----- 
From: "Josh Tolley" <josh at raintreeinc.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Wednesday, January 28, 2004 10:35 AM
Subject: Re: [Dshield] Virus emails


: Be careful firewalling by IP to stop these viruses. Since the virus
: emails to people in your Outlook address book, the computers that are
: sending these to you more than likely are from people you know (that is,
: people that have you in their address book). Which is one of the things
: that makes that nastly little attachment seem a little more harmless
: despite years of "don't open attachments on pain of surgical removal of
: clicking finger" warnings, because occasionally it looks like someone
: you know is sending you stuff.
: Anyway, I know most of the infected emails I was getting were from an
: off-site coworker who although happy that I helped her clean her
: computer up would have been particularly peeved if she couldn't send
: email to those of us in the office.
:
: Josh
:
: Doug White wrote:
:
: > I am firewalling by IP number -  This would be too much work for a very
large
: > traffic server, I think, but with the relatively few Source IP numbers I am
: > getting, I just add them to the firewall as they start showing up.  This is
: > since each infected machine pumps repeated messages.
: >
: > This has not stopped all of them, but it is stopping a lot of them for me.
: >
: > Your mileage may vary.
:
:
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
:
:




More information about the list mailing list