E-mail worm alert: Mydoom/Novarg.A

[resell01]

So what is the latest news on adding antivirus protection?

[Vixen]

I believe the last I read from Brad and Matt, virus protection is more than likely not something we will add at the server level.

The status is that we feel its not really needed. All the viruses up to MyDoom were in some executable format (.scr, .com, .bat, .exe, etc), which are BLOCKED by the server entirely.

The ONLY messages of MyDoom to get through were .zip files, which would have to be extracted before scanning anyway... Unarchiving is not a light process, and top that off with scanning... I dont see it as necessary to scan just zip files...

[fgomes]

One of my customers complained that his clients' emails to him were getting bounced back. When they contact over the phone and refer to the emails, my customer is surpised that the mail had not reached him. He also gets "Server Not available" from Outlook when he tries to access his mails for his domain. Is his problem related to this MyDoom virus or Spam filters at the server.

I have noticed the same "server not available" problem with my email accounts for several of my domains.

Submit a ticket, mydoom isn't causing any issues. Any spamassassin is only enabled if you turn it on, in which case, it wont cause "server unavailable" errors.

[generic]

sounds like a problem with the way you are configuring outlook

[nelsonke]

[quote=fgomes]One of my customers complained that his clients' emails to him were getting bounced back. When they contact over the phone and refer to the emails, my customer is surpised that the mail had not reached him.
QUOTE]

Sometimes this is not technical but a case of finger fatique. Ask the customer to forward you some of these "bounce back" messages and make sure they are spelled correctly.

[treeves]

Speaking of antivirus, do you have any statistics on how many executables have been blocked by Blades AV program?

It could be a good selling point with clients. Imagine... "our mail servers blocked over 100 bazillion potentially disasterous infections."

[treeves]

Here's a new one. We (www.profit-centers.com) received the following email just now:

Hello user of Profit-centers.com e-mail server,

Our antivirus software has detected a large ammount of viruses outgoing from your email account, you may use our free anti-virus tool to clean up your computer software.

For details see the attached file.

For security reasons attached file is password protected. The password is "55333".

Best wishes,
The Profit-centers.com team

The file attachment is a 13K message.zip. Okay, we are Profit Centers, and our host is SaferHost, which is also us.

I'm assuming that this is a virus. So be careful, this is one of the trickier viruses we've seen.

[Carly]

Yeh a friend of mine got that today with a .pif attached and the from address was his sister's. He almost opened it, but thought to call me first.

And if people are opening the more obvious ones, this one is going to be a mess.

[treeves]

Yep, found out it is the Beagle.B virus. Symantec found it today, and so did we.