To send or not to send 'virus in email' notifications?

Wed Aug 20 17:11:41 UTC 2003

On Wed, 20 Aug 2003, Wesley Vaux wrote:

> At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix
> KB823980 was installed" and machines rebooted.  Any ideas on how to remove
> this or what it may be?

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#what_is_a_hotfix__mbbi

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#removing_a_windows_hotfix_adbb

KB823980 appears to be the patch against DCOM

why do you wish to remove it?

Steve

> 
> 		Wes Vaux, CCNA, CCDA
> 		Network Security Engineer,
> 		9000 Regency Pkwy
> 		Ste 500
> 		Cary, NC 27511
> 		t 919.463.6782
> 		f 919.463.1290
> 
> 		Global Knowledge
> 		Experts Teaching Experts
> 		http://www.globalknowledge.com
> 
> 
> 
> -----Original Message-----
> From: Stephen J. Wilcox [mailto:steve at telecomplete.co.uk]
> Sent: Wednesday, August 20, 2003 10:33 AM
> To: Joe Maimon
> Cc: nanog at merit.edu
> Subject: Re: To send or not to send 'virus in email' notifications?
> 
> 
> 
> 
> On Wed, 20 Aug 2003, Joe Maimon wrote:
> 
> > 
> > Considering the amount of email traffic generated by responding to 
> > forged  virus laden email from culprits like sobig should email virus 
> > scanning systems be configured to send notifications back to sender or
> not?
> 
> well if you dont tell them they wont know, altho with sobig the return
> address 
> is false anyhow
> 
> it would probably be best to cache the sender/virus combinations and send a 
> single message per 7 days 
> 
> Steve
> 