Forum Home
Press F1
 
Thread ID: 37816 2003-09-18 22:29:00 Virus Warning Oxie (1318) Press F1
Post ID Timestamp Content User
176322 2003-09-23 03:17:00 Dramatic

I guess we are the unlucky ones then. I am receiving over 100 emails with the virus (which has been stripped by IHUG) per day. Luckily I can delete, like you, in Mailwasher too before downloading. However, I hate to think what is going to happen when I go away for a few weeks soon and won't be able to clear out the emails frequently. I have spam filtering, but this is not deleting the messages as they are not from spammers. Unfortunately, this worm does not do any damage - except mass emailing of itself. So no doubt those that are infected do not even know that they are infected.

Oxie (Lyn)
Oxie (1318)
176323 2003-09-23 03:27:00 Time for some serious thinking :|

So what is the difference between my and Godfather's situations that keeps us relatively spam and virus free? My business email is also posted on the net for all to see, I surf extensively every week, not always wisely, I have five computers currently hooked up to the web via a full time online Jetstream connection yet I don't get troubled by viruses.

I do keep my AV up to date with auto-update, I have ZoneAlarm on all computers (but with only basic protections enabled) and Xtra has been pre-cleaning in recent times.

Since 1993 I have had no infections, but have found "Stoned" on a 5½" floppy, picked up one hoax virus, had ZA quarantine two possible viruses that I dumped without further ado, and Xtra killed the Bugbear. That is 5 virus exploits in 10 years!

I don't believe in divine protection, so there has to be a fundamental flaw in the computer set up or surfing habits of those who do. I mean, 88 virus packages in one day? Is there any common thread that victims of such overkill can follow up to protect themselves in future?

Is omething fundamentally out of whack here. ?:|

Cheers

Billy 8-{)
Billy T (70)
176324 2003-09-23 03:39:00 Like Oxie I am still collecting Spam. I changed ISP's on Saturday. I too am now with Ihug. On Saturday I sent a cc. e-mail to all in my address book. Four hours later a steady stream of spam began arriving. With Ihug the viruses are being removed. And they are all spam-filtered. As of now the filter has removed exactly one e-mail. At present spam is averaging 5-6 pieces per hour. Day and night.
It would seem that someone in my address book has a virus that is sending contacts.
I have tried tracking it and it seems to be comming from or passing through Qwest.net. An ISP in the USA. I looked their web site up. To e-mail them you need a user name and password.
JJJJJ (528)
176325 2003-09-23 03:44:00 I got a phone call from my old ISP last night. He said there was 64 Mbs. in my old e-mail box. What do I want to do with them? I told him !!!!!! JJJJJ (528)
176326 2003-09-23 03:47:00 Billy T
I too wonder why I am affected and not you. Since 1996 I have never ever been infected by a virus. I do not visit unsavoury sites. I have only ever subscribed to about five places - usually to do with travel. I do have my email address on my personal homepage (but hey it has been there 7 years). Until a year ago I was lucky to receive 1 spam every 6 weeks. I also have my business email address at my domain name business website. And guess what? I have never received one piece of spam to that address. Freeparking hosts my buiness site, but IHUG is my provider and hosts my personal homepage.

So tell me what am I doing wrong?

Oxie (Lyn)
Oxie (1318)
176327 2003-09-23 03:52:00 JJJJJ

You have just confirmed to me that there is even little point in me changing email addresses, as like you say as soon as I email everyone in my address book I am bound to start receiving the virus emails again as they obviously have my email address in theirs.

Lyn (Oxie)
Oxie (1318)
176328 2003-09-23 03:56:00 > On Saturday I sent a cc. e-mail to all in my address book.

What you have done in this case is put a list of all of your contact e-mail addresses in many places you have no control over.
It only needs 1 of these recipients to have a harvesting trojan running unknown to the PC user, and you have neatly given all the addresses to a spammer.

Moral?
Never, ever use CC for a list of e-mails.
Use BCC, then each recipient only sees their e-mail address.
godfather (25)
176329 2003-09-23 04:01:00 Don't get too smug Billy T the reason you are not getting these emails is just luck and nothing to do with your pure surfing habits .

These are not spam emails, they are sent by virus infected computers which are picking up email addresses located on that computer .

W32 . Swen . A@mm is a mass-mailing worm that uses its own SMTP engine to spread itself . It attempts to spread through file-sharing networks, such as KaZaA and IRC, and attempts to kill antivirus and personal firewall programs running on a computer .
It is worth reading the Symantec information as the Microsoft update that it refers to is very cleverly done and no doubt is tricking many people to open the attachment .
Info here ( . symantec . com/avcenter/venc/data/w32 . swen . a@mm . html" target="_blank">securityresponse . symantec . com)

Searches the . html, . asp, . eml, . dbx, . wab, and . mbx files on the hard disk for email addresses .

Creates the file, %Windir%\Germs0 . dbv, where it stores the email addresses it has found .

. Creates the file, %Windir%\Swen1 . dat, where it stores a list of remote news and mail servers .

Drops a %ComputerName% . bat file, which executes the worm and a randomly named configuration file to store the local, machine-specific data .
Jim B (153)
176330 2003-09-23 04:01:00 Godfather,

I quite agree with you there. One should always use BBC or if I were emailing everyone in my address book I would use a distribution list which is a lot more efficient.

Lyn
Oxie (1318)
176331 2003-09-23 04:18:00 Don't get too smug Billy T the reason you are not getting these emails is just luck and nothing to do with your pure surfing habits

I agree he is just lucky, but walking around like a peacock saying I aint getting any spam. Just remember what happened to the noisy peacocks in Isel Park in Nelson lol.
I must have deleted a thousand of these emails in my yahoo,hotmail and extra accounts.
Its big news on CNN and BBC websites

tedheath
tedheath (537)
1 2 3 4