OT: Sobig EOL ?

[mikea]

On Thu, Sep 11, 2003 at 11:24:13AM +0100, Tony Finch wrote:
> Matthew Bowman <mbowman at UDCOM.COM> wrote:
> >
> >Sobig.F end of life is/was today?<
> >
> >I've seen a massive reduction in sobig.f detections which is a good
> >thing. Anyone else seeing that too?
>
> Yup.
>
> http://www.cus.cam.ac.uk/~fanf2/hermes/doc/talks/2003-09-techlinks/mgp00016.html

Massive reduction is correct. 8-day stats:

         Mails   spamassassin   rejected      scanner       total mails
         Total   says 'spam'    by ruleset    says virus    undelivered
 Sep  10  6495  1777 (27.36%)  418 ( 6.44%)   15 ( 0.23%)  2210 (34.03%)
 Sep   9  6605  1785 (27.02%)  411 ( 6.22%)  439 ( 6.65%)  2635 (39.89%)
 Sep   8  7100  1551 (21.85%)  456 ( 6.42%) 1017 (14.32%)  3024 (42.59%)
 Sep   7  2734  1053 (38.51%)  181 ( 6.62%)  390 (14.26%)  1624 (59.40%)
 Sep   6  2764  1144 (41.39%)  196 ( 7.09%)  303 (10.96%)  1643 (59.44%)
 Sep   5  5555  1450 (26.10%)  447 ( 8.05%)  363 ( 6.53%)  2260 (40.68%)
 Sep   4  6629  1815 (27.38%)  499 ( 7.53%)  412 ( 6.22%)  2726 (41.12%)
 Sep   3  6194  1543 (24.91%)  471 ( 7.60%)  651 (10.51%)  2665 (43.03%)

Most of yesterday's are Klez-with-Iframe, which produces _two_
"FOUND", and so the real number of viruses sent in to work is 8 for
yesterday.

--
Mike Andrews
mikea at mikea.ath.cx
Tired old sysadmin since 1964