On 09/04/2003 07:51 AM, Carlos E. R. wrote:
I'm getting an increasing number of spams with attachments that have the .pif extensions.
That is the Sobig.F virus. Like you said, it won't infect you, just tie up bandwidth.
I'm using fetchmail, postfix, procmail, spamassassin and AMaViS (which doesn't detect them, by the way). All of it from the default SuSE 8.2 with you patches.
Do you have antivir installed? AMaViS is just a program to pipe the mail through an antivirus program. I am using Anitvir for scanning email, having it update once a day through cron, and it has picked up this virus at least one a day for one user all week.
It is even worse. Now I'm getting autoresponses form postmasters. One complains that I sent a subscriber the virus "W32/Sobig.f@MM" - which I didn't, the headers returned says I used outlook X-) .
One of the characteristics of this virus, it spoofs the sender. You know you didn't send it, whoever did had your address in their machine, either address book or internet cache.
Another postmaster autoreject complains that the recipient box is full - and returns to me the 100Kb attachment. Heck. Who configured that, I wonder?
An amazing waste of bandwidth...
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
I didn't come from you. -- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: http://www.mydestiny.net/~joe_morris Registered Linux user 231871 God said, I AM that I AM. I say, by the grace of God, I am what I am.