Web Hosting Talk







View Full Version : big@boss.com...virus?


Axi
04-27-2003, 10:02 AM
I've been recieving blank emails almost everday from big@boss.com... and there with it, is an attachment. I am guessing its a virus. Does anyone have more info on this? Or how stop it from getting to me?

cubision
04-27-2003, 10:44 AM
Yep, it's a relatively old worm actually, first appeared sometime in January (which makes April old).

You can stop yourself from recieving e-mails like that by installing spam-assassin or similar product on your mail server, which will scan all e-mails on the server, and eliminate those containing known viruses (of course, it will tell you that it did so, and can send you the original text anyway).

EDIT: Here's a McAfee report about it http://vil.mcafee.com/dispVirus.asp?virus_k=99950

Axi
04-27-2003, 10:57 AM
Yea, remember recieving it about 3 times a day in January, its slowing down now. Well, thanks for the info anyways. So the software is called spam-assasin?

mcdesign
04-27-2003, 11:05 AM
I get it all the time..

cubision
04-27-2003, 11:38 AM
Here's the link to SpamAssassin:

http://www.spamassassin.org/

Hope that helps!

Axi
04-27-2003, 11:43 AM
Nice product. But does it actually stop the mail from comming in again?

cubision
04-27-2003, 11:48 AM
Actually, I'm sorry, I thought that SpamAssassin had put in filters for viruses too. But, after looking at the FAQ, it seems that I am mistaken.

About your other question, as far as I know, it tags emails as spam, so that you can review them, something similar to the Mail client in Mac OS X (which might even use spamassassin.)

Well, it's a good product, my former job used to use it, and it got almost everything, but, aparently, the virus filters were never put in, sorry.

Axi
04-27-2003, 11:50 AM
Dangit.. It's okay, thanks for trying anyways. Anyone else know of a program similar to it that can block emails? Or is there even any?

cubision
04-27-2003, 12:58 PM
Hah, look at that, we each hit our 300 and 100 marks on the same thread.

Not sure if this fits your needs, but search around on sourceforge is it doesn't. This is a virus mail scanner, that interfaces with the MTA: AMaViS

http://www.amavis.org/

RobTheGolfer
04-27-2003, 02:29 PM
We just began getting this virus today to all of our email addresses.

Axi
04-27-2003, 04:17 PM
Originally posted by cubision
Hah, look at that, we each hit our 300 and 100 marks on the same thread. Looks like we did :D I wonder, is it coming back again? I got it today and Rob_AcuNett is now getting it...

okihost
04-27-2003, 05:46 PM
I have been getting those since January and it started with one a day to all my @okihost emails, then it start growing to 3 or so a day.. Needless to say I added him to the block list and I no more hear from the boss.. I am however getting some new mails from Sarah Williams for the past couple days so the cycle just continues :(

ciqala
04-28-2003, 12:25 PM
I've been getting this for ages. it managed to pick up all my primary mail accounts off my website

so now i get spam to my
admin@
webmaster@
sales@
contactus@

its bloody annoying. but saying that since moving to cpanel something is scanning it and bouncing it back to sender (must suck for the owner of boss.com ) i know i have spamassasin on the server but i think cpanel adds a virus filter of somekind itself. i'm not an expert so i couldnt say either way for sure.

Ciq

H2
04-28-2003, 07:36 PM
Axi,

If you have root access and if your use Exim, edit your /etc/exim.conf and include sender_reject = /etc/spammers, then restart exim.

Put big@boss.com into /etc/spammers.

Axi
04-28-2003, 07:42 PM
I don't get it lol. I'm not used to these hosting terms... anyways, i recieved this email today and yesterday, its coming back..

H2
04-28-2003, 07:44 PM
Then ask your hosting provider to block you from receiving emails from this address.