What are you using to combat SoBig virus?

Let's compare notes and help the others

[rise2it]

Went through sheer hell when this SoBig thing started, but now I've got it under control. Tried several programs because I wanted to be able to delete this crap from the server without having to actually download it to my machine. (Getting about 2000 of these a day so far!)

If anyone else is in the same boat, the best thing I've found so far is called Mailwasher, which can be downloaded from www.mailwasher.net for FREE.

(It's freeware, but the guy that wrote it does accept donations. He'll be getting one from me!)

BTW, found out about this software from a post by Dazz in another forum.

What other tools are you guys (and gals) using (and can recommend) to combat this stuff?

[chiyo]

Tried many. Mailwasher has remained my email spam program for a couple of years.

[Imaster]

Even I am using MailWasher and find it pretty useful.

Btw, is there any script or software that we can directly install on the server, thus blocking such viruses directly from the server, i.e a virus scanner for the server?

[rise2it]

My hosting company (which has been outstanding in every other regard for 4 years) decided it was easier to ignore the issue than set up a few filters and protect their customers.

Outlook Express has an option on each filter to let you delete mail directly from the server, but for some idiotic reason only Billy Gates understands, this isn't an option if you're running the full version of Outlook, like me.
(Gotta be able to suck info out of the email and into a database.)

Mailwasher let me delete this crap directly from the server....I'm on a 56K dialup, and because of all the attachments on the SoBig emails, they were actually coming in FASTER than I could download them!

[georgeek]

I forward all my email (webmaster@ and personal@) to a SpamCop account and then POP it to Outlook on my network. I have never seen this virus attachment because SpamCop have been blocking it from the begining. They said they were getting 2 every second at one stage (1.6 Mbps of continuous virus traffic)!

I posted the following in another thread but it may be helpful here...

One of my favorite hosting services has reacted very well to the situation, I just got an email from them which in summary says that:

Current policy prohibits filtering emails server side.

Due to the widespread nature of the SoBig.F they have decided to make a single exception to this policy.

A filtering system has been designed to specifically combat the SoBig.F situation.

They have activated a filter on all domains that will eliminate all emails containing attachments with the extensions of PIF and SCR.

Anyones else seen a major ISP take action?

[dazz]

Im with you rise2it! ;)