PDA

View Full Version : Massive delays in CDZ email


Lt. Killer M
28-01-2004, 12:53
Some emails addressed to my CDZ mail arrive up to several days late.
It is NOT certain senders that cause the problem, as sometimes a re-send comes through quickly and the original email arrives 3 days later

[cry][cry]

anybody else with this problem?

Skyfish
28-01-2004, 13:24
Yesterday was a *very strange* days for email : I have used various emails from various accounts and there were problems everywhere.
I think those viruses yesterday took lots of servers down or something...
Emails that were sent yesterday and that timed-out, were received today [rolleyes]

col
28-01-2004, 13:32
My wife email via BT has been very disrupted too. I'd suspect that the latest round of viruses has caused a lot of server disruption - like Sky says.

ERIKK
28-01-2004, 14:02
Yup, my mail has been slow too! I also thought it had something to do with the new worm...

anarres
28-01-2004, 14:44
Keep an eye out for future - it was definitely a bad day for email virus' yesterday. Our mail server blocked about 50 of them, and there were many more that got stopped before that at our ISP.

DrAlimentado
28-01-2004, 15:02
I am the lucky recipiant of a 200+ mail bomb today [aargh] most addressed to either old utility support addys I once used or imaginary addys at my domain.
Outlook has no easy way to filter unknown addresses either [mad] suggestions for better mail managers anyone?

the attachments are slightly more cunning than normal... "unicode characters were included, attached as a binary file"

col
28-01-2004, 15:28
I use Mailwasher to pre filter my mail - but the free version will only work on one email address.

http://www.mailwasher.net/

Pastorius
28-01-2004, 23:18
Yes Killah - I got turn 42 from you some days after we reached 51 [crazyeye]

I use Trend Micro's Internet Security, and it just blocks evil attatchments and spam...

[hmm]

Beam
29-01-2004, 16:02
More info here: http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html

Just read on Teletext that the Worm generates 20 - 30 % of all e-mail traffic atm and that a new variant has been observed which runs already once the e-mail is opened, instead of waiting for the user to open an attachment. Not sure how true that part is / can be.

anarres
29-01-2004, 16:10
Several virus' already activte when an email is opened, without having to run an attachment. In Outlook the auto-preview and preview pane both open emails automatically and can inadvertantly activate hidden script in emails.

More annoyingly, some spam messages have pictures in them linked from the internet, and in the html that displays the image is a code that verifies your email address is a valid one (for spamming purposes). This means that opening a porn-spam-email in the preview pane, or having auto-preview enabled will send a message to a server saying that your email has been verified, which in turn gets sold on again for more spam. Oh joy!

Beam
29-01-2004, 16:20
Another good reason to get Mailwasher asap. anar, for some reason I can't get the correct codes around the link, can you edit them in?

digger760
29-01-2004, 16:35
The HTML formatting in the emails is what may cause problems. when you open the email, it may open web pages, jpegs and other stuff automatically..all thanks our friend "Mr HTML". I was just having a lot at outlook express but could'nt figure out how you can disable some of this stuff.

Some attatchments like exe's, zips are not opened automatically.

It depends on the type of attatchment to the email and the settings of your email program as to weather you download a virus by just reading the email.

The safest bet is to use a plain text email client. But you loose a lot in eye candy then (ie bold text, colourde fonts ect). The email my become unreadable as well.

anarres
29-01-2004, 17:37
Beam, I can't do it! [cry]

I suggest we spam symantec until they take the '@' out of the address - it really fucks things up!

Beam
29-01-2004, 17:47
LOL, mister fix-it can't fix it ;)

Anyway, there is a direct link to MyDoom on the frontpage of http://www.symantec.com

DrAlimentado
29-01-2004, 18:11
Thx Col :) Mailwasher seems to be just the ticket!

If it allowed me to organise my mail into seperate inboxes then I could dispense with outlook altogether :D

FWIW - you can disable html mail in outlook and outlook express, I don't know if that prevents the preview pane breaches altogether but it makes me feel safer at any rate.

Beam
02-02-2004, 22:59
Just got a message in Mailwasher that the ISP had processed a mail infected with MyDoom and removed the payload, not unusual these days. This time it was from someone I know however (not from CDZ btw!) and mailed this link for a removal tool:

http://securityresponse.symantec.com/avcenter/FxMydoom.exe

Just in case.