Zafi worm hitting hard

Heads up people. There's a new virus on the block.
It seems to spread pretty fast and is pounding our servers damn hard (about 700 in the past half hour).

http://vil.nai.com/vil/content/v_126242.htm

thanks SirDice!

its really nice to know whats happening before i get in to work. walk in ... boss says "new virus out" i tell'em "Yup! nai calls it zafi...blah, blah, blah" and im a friggen guru. saves so much time in the morning. hit f5 to refresh last nights page and everything you need to know...

Thanks for the head up.

heh.. i think i should install an AV now-a-days with all the worms and virii running loose.. but it feels sooo nice having my resources unused =P

Quote:

---

boss says "new virus out" i tell'em "Yup! nai calls it zafi...blah, blah, blah" and im a friggen guru. saves so much time in the morning.

---

Exactly my thoughts. Haha it is awesome.


- Adiz

Hmm... not much of a problem here. I've received a grand total of 3. Must have something to do with my content filtering rule that blacklists any IP addresses that send me virii. :-)

Got 200 emails from a mailserver that "claims" we sent them the virus from an alias account on our domain. If your out there admins turn the autoreply off.

CXGJarrod-
I second, third and forth that motion - Please turn off the autoreply

MEMO

TO: CXGJarrod

From: The admins

Date: Most of the Time
-------------------------------------------------------------------------------
Subject: Auto-reply

Mr. Jarrod

Most of us are out to lunch. Didn't you notice?

Signed

Duty Admin

Thanks SirDice,

madjag291,

Quote:

---

heh.. i think i should install an AV now-a-days with all the worms and virii running loose.. but it feels sooo nice having my resources unused =P

---

:D At least if you use your resources you might have some control over what gets used and what for. If someone decides for you.....oh la la.....what fun they will have. :eek:

cheers

I just had to install 2 more criticals for xp... 2 for directx... kinda weird, I didn't hear anything about them.

Soda_Popinsky,

Yeah, thanks for reminding me! :D Maybe if I stick my head under the pillow the need will just go away. Seems to becoming a never ending battle. Patch MS, Patch *nix, Patch MS, Patch *nix........

working on the fix for the 2.6.xxx kernal, then off to MS for the criticals... :)

cheers

Can't wait till we have AI's doing the OS programming for us, no more vulns! haha...

Quote:

---

Originally posted here by The Grunt
Can't wait till we have AI's doing the OS programming for us, no more vulns! haha...

---

Unless the AI was written by a human ;)

The only vulnerability this one abuses is the one inside the lusers head (Oh, look, how nice, an ecard, click-click). Still haven't figured out how to format, reinstall and patch a luser :D

Yeah, have been getting over 1500 of these today (about 1200 yesterday..)

Also them damn "you sent me a virus" auto messages suck..
I have sent some of the admins of such sites a mail along the lines of.

You sir, are not a part of the sollution,
you are a part of the problem !
Turn them *insert strong language* automatic warning mails of !!

Quote:

---

Originally posted here by the_JinX
Yeah, have been getting over 1500 of these today (about 1200 yesterday..)

Also them damn "you sent me a virus" auto messages suck..
I have sent some of the admins of such sites a mail along the lines of.
[/B]

---

It's getting close to 7-8000 a day here :(

The auto-replies suck indeed. If it's a Dutch company I will call them directly. You won't believe what total n00bs I get on the phone claiming to be responsible for the email of their company :rolleyes:

You could also email this link to them:
http://www.virusalert.nl/?show=nieuws&id=559
(Dutch anti-virus site)

Good idea..
I used to call local companies too, but it was not good for my blood pressure, and faith in humanity as a whole ;)

You'd think that with all the media coverage nowadays most admins would be aware..
But on the other hand, you'd expect people to stop opening non-requested attachments too !!

Even though I have not used M$ for almost a year, I do recall the AV program I did use. I would recommend it to anyone.

AVG Free Edition Anti-Virus

[shadow]They have received the VB100% in the test of Virus Bulletin in June 2004 on Windows XP platform.[/shadow]
Also...
[shadow]100% detection rate of AVG Anti-Virus System is continuously certified by independent ICSA laboratories.[/shadow]

You use what you want, but use something! and keep it up to date!

Have a good day.