From owner-freebsd-isp@FreeBSD.ORG Fri Aug 22 14:11:19 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 692AE16A4BF for ; Fri, 22 Aug 2003 14:11:19 -0700 (PDT) Received: from satin.sensation.net.au (c210-49-158-113.brodm1.vic.optusnet.com.au [210.49.158.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id 47F1D43F75 for ; Fri, 22 Aug 2003 14:11:18 -0700 (PDT) (envelope-from rowan@sensation.net.au) Received: from satin.sensation.net.au (localhost [127.0.0.1]) by satin.sensation.net.au (8.12.8/8.12.6) with ESMTP id h7MLBGoq035466 for ; Sat, 23 Aug 2003 07:11:17 +1000 (EST) (envelope-from rowan@sensation.net.au) Received: from localhost (rowan@localhost)h7MLBF4m035463 for ; Sat, 23 Aug 2003 07:11:16 +1000 (EST) X-Authentication-Warning: satin.sensation.net.au: rowan owned process doing -bs Date: Sat, 23 Aug 2003 07:11:15 +1000 (EST) From: Rowan Crowe To: freebsd-isp@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: sobig effects - batten down the hatches X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2003 21:11:19 -0000 Has anyone seen any effects of the "second phase" of sobig? According to the article, sobig infected computers should have started downloading and executing files en masse around 2 hours ago. http://www.f-secure.com/news/items/news_2003082200.shtml If it works it sounds like it's going to be incredibly ugly. -- Rowan Crowe - Melbourne, Australia