North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: other virus damages/costs.....(hello skynet.be ?)

  • From: Randy Bush
  • Date: Mon Feb 02 11:14:21 2004

> Looking at my disk stats, my mail storage spool has grown by 15% in the 
> past week not due the deluge of viruses which I can block and reject, but 
> in large part to those idiotic "Hi, I am sorry in a happy idiotic way to 
> inform you that the message you sent has a virus" messages....  As almost 
> all of them forge their email address, what is the point of warning the 
> "sender."  Even better, I wake up this am to 285 (and growing) messages 
> below telling me that someone at skynet is trying to send me a virus 
> message and it cc's 64 other people.  Nice.

# MyDoom craziness
:
* ^Subject:.*(\
\{Spam\?\} Warning: E-mail viruses detected|\
Anti-Virus Notification|\
BANNED FILENAME|\
Disallowed attachment type found in sent message|\
File blocked - ScanMail for Lotus|\
InterScan NT Alert|\
Message deleted|\
NAV detected a virus|\
Norton AntiVirus detected|\
RAV AntiVirus scan|\
Returned due to virus|\
Skynet Mail Protection|\
Symantec AntiVirus|\
Undeliverable: test|\
VIRUS \(.*\) IN MAIL FROM YOU|\
VIRUS \(.*\) IN MAIL TO YOU|\
VIRUS IN YOUR MAIL|\
Virus Detected by Network Assoc|\
Virus Notification|\
Virus found in a message you sent|\
Virus found in sent message\
)
$TRASH