SoBig volume way down

[up () 3 am]

the volume of SoBig virii hitting our mail server had gotten so big that I
had to have a cron job delete the quarantine every hour.  We were
averaging about 400 of them per hour until around midnight last night,
where the volume went to and remains about 1/10th of that.  Did this thing
expire (in which case, roughly 10% of all infected machines have
misconfigured clocks, assuming the exp date was in UDT), or did something
else happen?  Just curious...

James Smallacombe                     PlantageNet, Inc. CEO and Janitor
up () 3 am                                                          http://3.am
=========================================================================