4/20/05 Mail Viruses

[Vantage]

Due to a large number of emails being cought with Viruses, There is a good deal of slowness in the mail servers at the moment.

We are working on this but the only real way to get rid of the issue is to stop the virus filtering and we dont plan to do that.

[Altair]

Thank you for the update.

I actually just got off the phone with one of my clients saying that he couldn't send email. Some people can, but it is terribly slow. This is on mail5 BTW.

Anything you can do to mail5 to speed things up would be great.

[server-68]

Confirmed. I can't use mail5 either.

[dvanburen]

The culprit is W32.Beagle.BO@mm. It is an email worm that mass mails copies of a Trojan.Tooso variant. We are working on a way to filter these attachments out before the antivirus filter to bring the mail servers back up to speed.

[DigitalSkyline]

I received a virus in a zip the other day... of course I erased immediately... I assume it was a new one making the rounds :/

The message was something like: I know that you know I know you.

[Altair]

That is certainly an evil little bug. Tries to remove references to your AV software and other security software.

It would appear that the little beast comes in a zip file, containing the words price (unless I looked at the wrong variant). Are the file sizes the same for every attachment? If they are the same, you can filter out zip file attachments that contain the word price and are a certain file size. Might be too simple, but I thought I would share.

[mdallarosa]

What is the actual situation. I have customers on mail3 complaining they have not received mails for some hours.

[Vantage]

The situation seams to have leveled off.

The server load isnt terribly high at the moment. It seams that the outgoing filters out there are now catching this.

[sivvaa]

I have few clients complaining about recieveing viruses thro' mail.

Any update ?

[cambodia]

i receive more than 10 / day even i off my catch all account , please fix it as soon as possible

[Vantage]

there is no "FIX" There is no way to catch all viruses out there. As it is we update our virus software every 2 hours. But sometimes it can take a few days before the people making the software include signitures for new viruses.

There is not much that can be done about the ones that get through.

[cambodia]

hmm some email just change address but the subject and content the same ,can we add this into black list of server so other will not receive this , and if other receive it and add so might can avoid me to receive it too , is this possible ?

[dvanburen]

Looks like we are getting hammered again. Expect problems with anything related to email.

[streamlineweb]

Do we have any ETA?

I have some very upset clients!

Thank you for any guidance you can provide.....

-Dustin

[DVHost]

I have a customer seeing in issue in @Mail whereby:

1. Deletes an item in inbox to trash bin.
2. The item then moves itself to drafts.
3. It then moves from drafts to sent items folder.

This gives the customer the idea that its a worm of some type sending itself from Webmail which is doubtful but it is what appears to be happening.

I havent confirmed this myself because I can not login to his @Mail account to test this.