Skip to content

Where is the kaboom? It was supposed to go kaboom!

In with all of the email we’ve been receiving because of the sobig
virus and variants was this gem:

Date: Thu Aug 21 11:22:53 2003
To: <faq@e-smith.com>
From: postmaster@alna.lt
Subject: Network Associates Webshield -  e-mail Content Alert

Network Associates WebShield SMTP V4.5 MR1a on mars intercepted a mail
from <faq@e-smith.com> which caused the Content Filter <*.pif> unallowed
attachment to be triggered.

Long ping times though.

Comments 8

  1. dargit wrote:

    I just received something like 14 of those horrible viruses in a row, “Re; ….” with the .pif attachment. ugh. *hate it*
    You obviously weathered the blackout. That was fun.

    Posted 21 Aug 2003 at 4:16 am
  2. Rich wrote:

    Yeah, but I bet yours were all from Earth!

    Yep, the blackout was interesting indeed. The life-or-death part worked out fine — we lost no fish! I learned two important lessons, though. I promised myself I would not post about the blackout so I will convey them here instead:

    • Three of the six plugs on the UPS are not battery-backed. Should probably use the ones that are, instead.
    • While a cordless phone is useful day-to-day, it stops being useful when the only power available is 48VDC from a phone jack.

    Oops. :-)

    Posted 21 Aug 2003 at 4:36 am
  3. Rich wrote:

    Also,

    # drop sobig
:0
* ^Subject: (Your details)|(Thank you!)|(Re: Thank you!)|(Re: Details)|(Re: Re: My details)|(Re: Approved)|(Re: Your application)|(Re: Wicked screensaver)|(Re: That movie)|(Attachment:)
* ^X-MailScanner: Found to be clean
* ^X-Mailer: Microsoft Outlook
* ^X-MSMail-Priority:
* !^X-MimeOLE:
* ^Content-Type: multipart/mixed;
/dev/null
    Posted 21 Aug 2003 at 4:39 am
  4. fweebles wrote:

    *throws a phone-line powered handset at Rich from the seemingly infinite pile his parents keep around in case the power goes out*

    Posted 21 Aug 2003 at 4:39 am
  5. fweebles wrote:

    Posted 21 Aug 2003 at 7:00 am
  6. dargit wrote:

    Yep. I have just moved my firewall from freebsd to openbsd. Guess what was plugged into the UPS and what wasn’t? *oops* old firewall box was still running but…

    Posted 21 Aug 2003 at 9:59 am
  7. dargit wrote:

    Thanks! It was more complete then the quick one I had thrown together. ;-)

    Posted 21 Aug 2003 at 10:02 am
  8. floatingatoll wrote:

    New one floating about.

    # drop patch.exe
:0
* ^Subject: Use this patch immediately
* !^X-Mailer:
* !^X-MimeOLE:
* ^Content-Type: multipart/mixed;boundary="xxxx"
/dev/null
    Posted 01 Sep 2003 at 2:01 pm