"VIRUS WARNING"

Miss B Haven · 03-01-2004, 12:02 PM

I've got two at work today even though the firewall. One from an "unknown" outside with a text attachment. Second one from inside (and a person I know very well) with a zip file that was an executable file (scary). If it hadn't been for the wierd heading I might have opened the second one. :shocked:

north coast kook · 03-01-2004, 12:08 PM

This is really weird cause I had a email in my inbox today saying that a message I sent was returned to me because it contained a virus. But I never sent an email to this person! I don't even recognise the email address! Anyone else??
-KooK

skrimmy · 03-01-2004, 12:11 PM

Wow Mel. That's scarey considering where you work! You should be the last ones to have viruses getting in!

We've got at least three layers of virus protection where I work, they frequently get as many as two to three updates daily. There were at least 70 new viruses released in the last month alone.

Keep those virus updates up to date! Check them daily or you might be surprised!

Blue Tip Spinner · 03-01-2004, 12:17 PM

thanks for the reminder. i just updated my norton anti-virus here at work.

Jennie@ifish · 03-01-2004, 12:23 PM

Guys... you cannot tell where the virus is from. The header can be spoofed.

Here is what happens. Someone gets a virus, who is unprotected. The person with the virus now has a virus that will go through their address book, and pick a random e mail address to "send" from. The virus puts THAT address in the "from" field.

So, please. Don't blame anyone for a virus just because it looks like it is from them. Most likely, it is not, and the person in the from field is wrongly accused.

Thanks, and now I will move this to LIG.
Jen

skrimmy · 03-01-2004, 12:36 PM

The virus that's making the rounds today is a mass mailer worm and it DOES use spoofed email addresses. Symantec rates is a category 4, which is a nasty one. It has it's own SMTP mailer engine and will farm all the email addresses it can find on your computer and send itself to all of them with a spoofed "from" address. Have fun, be careful out there!

SPAZZ · 03-01-2004, 08:54 PM

Thanks for the info

Artwo · 03-01-2004, 11:56 PM

I know this is off topic by I thought this would get better exposure here than on LIG. The mods can move this if they see fit.

I recieved the following e-mail today at home from an ifisher and my IP quarentined it because they detected a potential virus in the attachment.

"Date: Mon, 1 Mar 2004 14:08:04 -0500
From: xxxxxxxxx@aol.com
To: jeffconniek@canby.com
Subject: Re: Your document

Please read the attached file."

I removed his e-mail address because I sent him a private message about it.

Be careful out there; there is a new rash of viruses going around.

JK

[ 03-01-2004, 12:59 PM: Message edited by: Artwo ]

Smj · 03-02-2004, 05:54 AM

north coast kook....I had the same thing happen as you, only a hundred times worse! I got the Klez.h virus somehow, and Klez would make up many many e-mail addies, some real some not, and send them from my computer. I got up one morning and had over a hundred "Returned/undeliverable e-mails". What seemed strange to me was Klez didn't send to ALL the adresses in my book, just some of them, and a whole bunch of addies it made up.

If you go to symantec or F-secure you can download "Klez.tool" or something like that and it will check your system and rid you of Klez if it's there.

Smj

Diehard · 03-03-2004, 07:37 AM

Artwo, I received an e-mail today from an AOL address with the same number of caracters as the one you received ( 9 ). The message read: "I don't bite" and had an attachment and password.
I will PM you the address. Let me know if it's the same.
Thanks

blubeast · 03-03-2004, 07:50 AM

Received several myself... spooky. Surf Safely. Delete all messages not from known folks.

Mello-Yello · 03-03-2004, 07:51 AM

I got my first ever worm this week too. It was the Nachi.B. Fortunately, the company has good MIS staff that helped me walk through getting rid of it. My anti-virus software could detect it but couldn't remove it.

From now on, I'm updating my virus software at least weekly, AND, just as important, updating my windows more frequently. I'm running XP, and it appears there are lots of holes in XP. These upgrade patches plug those holes.

Having a virus is one thing, but the thought of havning worms makes me gag...

skrimmy · 03-03-2004, 07:58 AM

Beware of the latest virus (BEAGLE), and variants of it, released this week. It arrives with a .zip attachment that is password protected. Inside the .zip file is a file with a .exe+ file extension. The email provides the password to unzip the .exe+ file. If you're not up to date with your anti virus definition files, you'll be infected when you open the zip file. Careful out there.....keep your anti virus software up to date. Delete any email from folks you don't know and be wary of emails from those you do know.