RE: Slow throughput on East Coast ADSL ?

From: Andy Smith <ajs_at_dca.net>
Date: Wed Aug 20 2003 - 13:14:01 EDT

Hello,

The problem is probably the Sobig worm.

---------- Forwarded message ----------
Date: Wed, 20 Aug 2003 12:22:38 -0400
From: samantha.m.hilliard@verizon.com
To: ajs@dca.net
Subject: FYI

Hello,

FYI:
 The Sobig worm is apparently causing a flood of emails that is
adversely
impacting our network throughput. Please prompt your customers to
initiate
preventive / corrective action describe in the bulletin below. The DNOC
is
monitoring the level of traffic in each of the bridge groups.
Individual
bridge group found to be significantly impacting the router might be
taken
out of service.

Please immediately correct or disable users impacted by the worm.

To: NCC and Telecom ISAC Representatives (Routine), Info NSIE Industry,
Industry Canada, and OCIPEP Canada

Symantec Security Response has upgraded the W32.Sobig.F@mm to a Category
3
threat. W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends
itself to all the email addresses that it finds in the files with
extensions
.dbx. .eml, .hlp, .htm, .html, .mht, .wab and .tx. Emails received from
this
worm will contain the subject line:

* Re: Details
* Re: Approved
* Re: Re: My details
* Re: Thank you!
* Re: That movie
* Re: Wicked screensaver
* Re: Your application
* Thank you!
* Your details

Sobig.F can download arbitrary files to the infected computer and
execute
them. The author of the worm has used this functionality to steal
confidential system information and to set up spam relay servers on
infected
computers.

This functionality may also be used as a worm self-update feature. Under
the
correct conditions, Sobig.F attempts to contact one of the list of
master
servers, which the author of the worm controls. Then, the worm retrieves
a
URL that it uses to determine where to get the Trojan file, downloads
the
Trojan file to the local computer, and then executes it.

Thanks,

Samantha

                -----Original Message-----
                From: owner-verizonisp@westnet.com
[mailto:owner-verizonisp@westnet.com] On Behalf Of Eric Kagan
                Sent: Wednesday, August 20, 2003 9:42 AM
                To: Verizonisp
                Subject: Slow throughput on East Coast ADSL ?

                Is anyone out there experiencing serious slow downs and
through put problems on ADSL circuits ? We have 60 or so customers that
are constantly timing out in intermittent / random patterns. None of
our other providers or services are having this problem (and some are
shared on the same router). Our network traffic is slightly higher than
normal, but not enough to warrant what I am seeing. I am trying to
figure out the scope / geography of the problem or if it is just us.
Any info would be appreciated. Verizon is not bing very helpful (I know
that shocks most of you !)

                Thanks
                Eric

                Eric Kagan
                Access Northeast
                Commrail, Inc.
                ekagan@axsne.com
                978-562-4475 Voice
                978-562-4413 Fax

Recent archives of the list can be found at
http://www.westnet.com/verizonisp/
Send 'unsubscribe' in the body to verizonisp-request@westnet.com to leave.
Received on Wed Aug 20 13:14:06 2003

This archive was generated by hypermail 2.1.8 : Tue Jan 11 2005 - 13:51:49 EST