RE: To send or not to send 'virus in email' notifications?

["Stephen J. Wilcox" <steve () telecomplete co uk>]

On Wed, 20 Aug 2003, Wesley Vaux wrote:

> At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix
> KB823980 was installed" and machines rebooted.  Any ideas on how to remove
> this or what it may be?

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#what_is_a_hotfix__mbbi

http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/HFDeploy.htm#removing_a_windows_hotfix_adbb

KB823980 appears to be the patch against DCOM

why do you wish to remove it?

Steve

>               Wes Vaux, CCNA, CCDA
>               Network Security Engineer,
>               9000 Regency Pkwy
>               Ste 500
>               Cary, NC 27511
>               t 919.463.6782
>               f 919.463.1290
>
>               Global Knowledge
>               Experts Teaching Experts
>               http://www.globalknowledge.com
>
>
>
> -----Original Message-----
> From: Stephen J. Wilcox [mailto:steve () telecomplete co uk]
> Sent: Wednesday, August 20, 2003 10:33 AM
> To: Joe Maimon
> Cc: nanog () merit edu
> Subject: Re: To send or not to send 'virus in email' notifications?
>
>
>
>
> On Wed, 20 Aug 2003, Joe Maimon wrote:
>
> > Considering the amount of email traffic generated by responding to 
> > forged  virus laden email from culprits like sobig should email virus 
> > scanning systems be configured to send notifications back to sender or
> not?
>
> well if you dont tell them they wont know, altho with sobig the return
> address 
> is false anyhow
>
> it would probably be best to cache the sender/virus combinations and send a 
> single message per 7 days 
>
> Steve