SoBig volume way down

the volume of SoBig virii hitting our mail server had gotten so big that I
had to have a cron job delete the quarantine every hour. We were
averaging about 400 of them per hour until around midnight last night,
where the volume went to and remains about 1/10th of that. Did this thing
expire (in which case, roughly 10% of all infected machines have
misconfigured clocks, assuming the exp date was in UDT), or did something
else happen? Just curious...

James Smallacombe PlantageNet, Inc. CEO and Janitor
up@3.am http://3.am

From what I understood, it was supposed to (or did) deactivate on

9/10/03.

Regards,

Joe Boyce

sobig.f was supposed to deactivate by today. now to see if we get sobig.G
starting up tomorrow...

--regis