[hankduck]

Hi;

I'm now getting over 100 emails a day with the sobig virus attached. My latest version of Macafee AV picks them up and I delete them but it is becoming a major hassle to download my email.

I have scanned my system and searched for the characteristic files that accompany a sobig infection and my system is clean.

Is there anything I can do to stop this other than await the date (?in September) when the sobig virus will ostensibly become deactivated on infected systems?

 

[idtent]

Create rules to move these to your deleted items folder, or just delete them, then empty them after you check your mail.

Go to this site to get a list of subject lines to use on the rules wizard.

http://www.f-secure.com/v-descs/sobig_f.shtml

This should work for all versions of Outlook.

 

[hankduck]

Thanks for your reply but I've been there, done that. I already have a filter set up in my email agent (Eudora) that puts them in my "Trash" barrel. However, I have to delete these one at a time, as my antivirus program picks them up

I am hoping to find a better way. ....and I would never use Outlook Express, the ultimate security sieve from Microsoft.

 

[johnwill]

Short of installing a filter in front of your email, there isn't an easy way to stop them. I'd consider checking the mail once a day with webmail, and deleting all of them there before you download them.

 

[idtent]

Outlook and Outlook Express are two different items. I am sorry for not specifying. You can also have your av scanner not scan the folders that your mail is in on the harddrive or turn it off in Eudora. The infection comes from opening the attachment, not an exploit.

If you are tired of deleting one at a time , get F-Secure Internet gateway and pay for the internet mail option. It will remove it before you get it.

Johnwill's webmail idea kicks butt though. Only if you have setup some type of webmail access or your ISP has.

 

[hankduck]

Guess using my ISP's webmail site is the only way. Does anyone have the same info regarding SOBIG...that it will cease functioning in mid-aseptember?

Hank