[60954] in North American Network Operators' Group
RE: To send or not to send 'virus in email' notifications?
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Wed Aug 20 13:12:35 2003
Date: Wed, 20 Aug 2003 18:11:41 +0100 (BST)
From: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
To: Wesley Vaux <Wesley.Vaux@globalknowledge.com>
Cc: Joe Maimon <jmaimon@ttec.com>, <nanog@merit.edu>
In-Reply-To: <695771C76AEED411A19800902771A5040193A7EA@NC10S106>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 20 Aug 2003, Wesley Vaux wrote:
> At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix
> KB823980 was installed" and machines rebooted. Any ideas on how to remove
> this or what it may be?
http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#what_is_a_hotfix__mbbi
http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#removing_a_windows_hotfix_adbb
KB823980 appears to be the patch against DCOM
why do you wish to remove it?
Steve
>
> Wes Vaux, CCNA, CCDA
> Network Security Engineer,
> 9000 Regency Pkwy
> Ste 500
> Cary, NC 27511
> t 919.463.6782
> f 919.463.1290
>
> Global Knowledge
> Experts Teaching Experts
> http://www.globalknowledge.com
>
>
>
> -----Original Message-----
> From: Stephen J. Wilcox [mailto:steve@telecomplete.co.uk]
> Sent: Wednesday, August 20, 2003 10:33 AM
> To: Joe Maimon
> Cc: nanog@merit.edu
> Subject: Re: To send or not to send 'virus in email' notifications?
>
>
>
>
> On Wed, 20 Aug 2003, Joe Maimon wrote:
>
> >
> > Considering the amount of email traffic generated by responding to
> > forged virus laden email from culprits like sobig should email virus
> > scanning systems be configured to send notifications back to sender or
> not?
>
> well if you dont tell them they wont know, altho with sobig the return
> address
> is false anyhow
>
> it would probably be best to cache the sender/virus combinations and send a
> single message per 7 days
>
> Steve
>
