Virus Warning by Wg !
#1
01-31-02, 05:54 PM
Virus Warning by Wg !
ATTENTION MODERATORS AND MEMBERS !
I don't want to cause too much alarm, but there has been a virus around on the net through emails for a while now. If I remember it right it is very nasty. It open in your email by saying "HI HOW ARE YOU. I HAVE SOMETHING THAT I WANT YOUR OPINION ON. Or something close to that. I remember this virus to delete you hard drive.
The reason that I posted this warning here is that I just receieved 3 emails with an attachment on each with the above message. At the same time I received 3 emails from Do It Yourself telling me that someone has replied to a post that I replied to as they normally do. I thought the same number of emails from Do It Yourself was a coincident that it matched the same number of the virus emails that I received today and at the same time.
I recognized the emails to be a virus by checking its properties and source. The subject title showed each email to have come from a different source on a different subject but the properties showed them all to have come from the same source.
Then I just checked my emails again and flags flew! I received one email from the DIY telling me again someone has replied to a post on the DIY. Big flag was right behind it I received another matching HI HOW ARE YOU. I checked its source and it matched the same source as the other three virus emails.
If you receive one of those emails saying "HI HOW ARE YOU" DO NOT OPEN THE ATTACHMENT TO THAT EMAIL! MARK THAT SENDER AS BLOCKED AND DELETE THE EMAILS ASAP! You should be alright as long as you don't open the attachment to that email.
MODERATORS!
I am wondering if this virus has attached somehow to the DIY auto mailing program. I truly hope I am wrong but want everyone to be safe.
Sorry if I am wrong but wanted no one to be hurt by this virus. This is the fastest way I could warn everyone.
Hope it is not too late for anyone.
Wg
I don't want to cause too much alarm, but there has been a virus around on the net through emails for a while now. If I remember it right it is very nasty. It open in your email by saying "HI HOW ARE YOU. I HAVE SOMETHING THAT I WANT YOUR OPINION ON. Or something close to that. I remember this virus to delete you hard drive.
The reason that I posted this warning here is that I just receieved 3 emails with an attachment on each with the above message. At the same time I received 3 emails from Do It Yourself telling me that someone has replied to a post that I replied to as they normally do. I thought the same number of emails from Do It Yourself was a coincident that it matched the same number of the virus emails that I received today and at the same time.
I recognized the emails to be a virus by checking its properties and source. The subject title showed each email to have come from a different source on a different subject but the properties showed them all to have come from the same source.
Then I just checked my emails again and flags flew! I received one email from the DIY telling me again someone has replied to a post on the DIY. Big flag was right behind it I received another matching HI HOW ARE YOU. I checked its source and it matched the same source as the other three virus emails.
If you receive one of those emails saying "HI HOW ARE YOU" DO NOT OPEN THE ATTACHMENT TO THAT EMAIL! MARK THAT SENDER AS BLOCKED AND DELETE THE EMAILS ASAP! You should be alright as long as you don't open the attachment to that email.
MODERATORS!
I am wondering if this virus has attached somehow to the DIY auto mailing program. I truly hope I am wrong but want everyone to be safe.
Sorry if I am wrong but wanted no one to be hurt by this virus. This is the fastest way I could warn everyone.
Hope it is not too late for anyone.
Wg
#2
01-31-02, 06:19 PM
I'm thinking it's still a coincidence, Wg. For one thing, your email program probably checks for new email once every couple of minutes, so any email received during that period would appear to you to arrive simultaneously. Secondly, doityourself.com is running Unix (or a variant). That email virus you mention only happens on Microsoft Outlook, which obviously runs only on Windows.
It is remotely possibly, but unlikely, that the virus emails are coming from DIY.com.
-- Jim
It is remotely possibly, but unlikely, that the virus emails are coming from DIY.com.
-- Jim
#5
01-31-02, 08:01 PM
Thanks for the info. I read it and learned. One question is that I didn't get emails from anyone except those hi how are you and do it yourself. The properties I looked at showed it to be no one I have ever heard of. I a computer sending this out without the person knowing it? Can I have a clue in some manner where it is coming from. I blocked the sender and that last hi how are you was successfully blocked before it came through. I was told it was blocked by the deleted flag on my computer. Is there no way to know where it is coming from? Also why now. I thought it had run its coarse has it mutated?
Curious
Wg
Curious
Wg
#6
02-01-02, 12:01 PM
I'm not sure exactly what happened, but here is one possible scenario: You are in a stranger's Outlook address book for whatever reason. Perhaps he/she sent you an email long ago regarding your website, and Outlook automatically added your email address to his address book. He rarely uses Outlook. In fact, he hasn't used it since last July. When he opened Outlook yesterday for the first time since July, it turns out he had received the Sircam worm/virus in an email at some point. Not knowing anything about it, he opened the email's attachment, which activated the worm/virus, infected his computer, and sent out the emails containing the worm/virus attachment to everyone in his Outlook address book, including you.
This will be happening forever, as stragglers finally receive and reactivate the worm. You're doing the right thing by blocking that sender.
Unless you know someone who can decipher email headers, you might not be able to figure out who the sender is. If there is a real email address that you can reply to, you might drop him/her a note with the link I posted.
Good luck
-- Jim
This will be happening forever, as stragglers finally receive and reactivate the worm. You're doing the right thing by blocking that sender.
Unless you know someone who can decipher email headers, you might not be able to figure out who the sender is. If there is a real email address that you can reply to, you might drop him/her a note with the link I posted.
Good luck
-- Jim
#7
02-01-02, 12:28 PM
Sketchy thanks you have been very informative in my quest. I have read the link and learned both from it and from what you have said. Thank you
For further updates. I received a total of 4 different emails each approaching the invite to open the attachement all from the same sender that had been redirected at least three times when reading the properties of the sender.
Today I have again received several emails from DIY telling me of responses on posts that I entered replies as they normally have done in the past. I HAVE RECEIVED NO MORE VIRUS EMAILS.
Sketchy was right DIY is not connected to the virus emails or I would think that I would have also receieved the virus emails accompanying the DIY emails. Must have just been a coincident in timing yesterday.
Still better to have been safe for everyone that sorry if I hadn't issued the warning.
Thanks
Wg
For further updates. I received a total of 4 different emails each approaching the invite to open the attachement all from the same sender that had been redirected at least three times when reading the properties of the sender.
Today I have again received several emails from DIY telling me of responses on posts that I entered replies as they normally have done in the past. I HAVE RECEIVED NO MORE VIRUS EMAILS.
Sketchy was right DIY is not connected to the virus emails or I would think that I would have also receieved the virus emails accompanying the DIY emails. Must have just been a coincident in timing yesterday.
Still better to have been safe for everyone that sorry if I hadn't issued the warning.
Thanks
Wg
#8
02-01-02, 04:56 PM
Wg.
About 3 months ago I recieved the same emails. I thought too it might be coming from here or from someone who found my address as the text relates to a request for help. I recieved four in one week however two went to different email addresses I use. The return address was different each time and I thought a bit that It was a targeted email when one of them had a return address with a like business category of one of my addresses. I deleted them as they came and haven't received one since. Last week I won something on ebay and corresponded with the seller. The following day I recieved an email from her and it contained a virus...The subject was "You are fat" and I thought she might have sent me a joke or something and I got caught...I checked the address more carefully and found it had a hyphen added to it so it was not her actual address....I then spoke with a Computer guru who instructed me to pick up a software program to monitor my email and any intrusive activity while I'm online...I decided to save some money and purchase a program on Ebay. I found what I thougt was the correct software and bid to win. Upon recieving it, it just looked like something from an underground group and it sure was not what I intended to buy...curiousity got to me and I ran it and sure enough my Norton Antivirus kicked in as it picked up an unrepairable virus and I had to format again.......Ouch.....twice in a week......Does anyone know the name of a program with a firewall, email monitor with intrution alerts.....
Thanks
Stephen
About 3 months ago I recieved the same emails. I thought too it might be coming from here or from someone who found my address as the text relates to a request for help. I recieved four in one week however two went to different email addresses I use. The return address was different each time and I thought a bit that It was a targeted email when one of them had a return address with a like business category of one of my addresses. I deleted them as they came and haven't received one since. Last week I won something on ebay and corresponded with the seller. The following day I recieved an email from her and it contained a virus...The subject was "You are fat" and I thought she might have sent me a joke or something and I got caught...I checked the address more carefully and found it had a hyphen added to it so it was not her actual address....I then spoke with a Computer guru who instructed me to pick up a software program to monitor my email and any intrusive activity while I'm online...I decided to save some money and purchase a program on Ebay. I found what I thougt was the correct software and bid to win. Upon recieving it, it just looked like something from an underground group and it sure was not what I intended to buy...curiousity got to me and I ran it and sure enough my Norton Antivirus kicked in as it picked up an unrepairable virus and I had to format again.......Ouch.....twice in a week......Does anyone know the name of a program with a firewall, email monitor with intrution alerts.....
Thanks
Stephen
#10
02-04-02, 03:24 PM
A good firewall & one that is also free is called Zonealarm by Zonelabs. I use it & it has a built in email protector called mail safe. If you want to here more about it from others just go to DSLREPORTS.com & most posters use it & recommend it.
#12
02-07-02, 09:58 PM
Gentlemen and Ladies.
You should not only have a firewall up and running like ZoneAlarm but you should have an AntiVirus program running also.
If you would like a good, updatable AV program go to Grisoft.com and download AVG. It too is free! No one should be without these or similar products today.
You should not only have a firewall up and running like ZoneAlarm but you should have an AntiVirus program running also.
If you would like a good, updatable AV program go to Grisoft.com and download AVG. It too is free! No one should be without these or similar products today.
