Trouble with our Support Line

From: [at]} <postmaster{>
Date: Wed, 3 Sep 2003 11:10:00 +0200

----boundary-LibPST-iamunique-459438146_-_-
Content-type: text/plain

Dear BlackBox Users

Since a couple of days we are receiving occasional bursts of SOBIG.F mails
at our support mailing address. As it appears, these messages seem to
originate from a single machine, which as long as it is connected, sends a
100KB message to us every few minutes...

Our hypothesis is that the machine is connected via dial in to German
t-online, typically in the morning and the afternoon. Yesterday (Tuesday)
afternoon messages started round 17:00. Today (Wednesday) morning there has
been a burst around 7:00.

Last weekend there were more and longer burst, adding up to a few hundreds
of messages.

We presume that the machine's owner is not aware of the infection, though a
slow-down might be recognizable, assuming that transmitting 100KB messages
does take some time on both ends.

If the above profile could fit you, we would appreciate if could make sure
that your machine is not infected by SOBIG.F and send us a short message to
let us know that we need not investigate the issue further.

Thank you very much for your help,
        The Oberon microsystems Support Crew

--------------------------------------------

To unsubscribe from this mailing list, send a message containing the word "unsubscribe" to:
   blackbox-request{([at]})nowhere.xy

To get a list of valid e-mail commands and instructions on their usage, send a message containing the word "help" to the above address.

Send any problem reports or questions related to this email list to the list owner at
   owner-blackbox{([at]})nowhere.xy

Current posting policy:

a) To post you should use the same address by which you are subscribed to the mailing list. That way, the list server will recognize you as subscriber and forward your posting immediately, without creating any overhead.

b) If, for some reason, you cannot post from the address, by which you are subscribed, your message will be moderated to avoid spam. Please understand that moderation will often cause some delay, in particular over weekends or holydays.



----boundary-LibPST-iamunique-459438146_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"
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----boundary-LibPST-iamunique-459438146_-_---
Received on Wed Sep 03 2003 - 11:10:00 UTC