Re: [nznog] Sobig.MM infected users?

Thanks Neil, account temporarily locked and the customer has been contacted. Kind Regards, -- Mark Little Systems Administrator, IHUG Ltd. On Fri, 27 Jun 2003, Neil Gardner wrote:

Hi guys, (specifially those at IHUG) any chance someone can do something about this user on IHUGs ADSL system? - (203-118-165-45.adsl.ihug.co.nz)

This post is in desperation after the correct procedure for reporting this was followed twice with IHUG and no-one did anything about it except send a request for the full email which was given, and then sent me back a totally blank reply. IHUGs Helpdesk were apologetic, but said that no-one could do anything about it except between the hours of midnight and 8am (!!!!)

Anyway, it wouldn't normally be an urgent issue, but the poor sucker that's infected has just subscribed to about 5 more lists that I'm on, as well as a lot of not so IT literate users, so he's going to catch a few of them...

As an aside, what do most ISPs do if they find someone is infected and is sending out stuff lke this?

(Yes, those dates in the email below are old - that's from the first bunch of emails he sent out when I first complained - and yes, I have checked the IP is still the same as of about 20 minutes ago)

Cheers - Neil G

...

Return-Path: Delivered-To: moderator for ultimate(a)nzfda.org.nz Received: (qmail 32200 invoked from network); 18 Jun 2003 19:47:03 -0000 Received: from 203-118-165-45.adsl.ihug.co.nz (HELO MCNEILLJ-JLG772) (203.118.165.45) by 202-0-37-249.cable.paradise.net.nz with SMTP; 18 Jun 2003 19:47:03 -0000 From: To: Subject: Re: Movies Date: Thu, 19 Jun 2003 7:47:09 +1200 Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="CSmtpMsgPart123X456_000_0001EFBA"

_______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog