ECN Forum Forums General Topics of the Trade General Discussion Area * * * Bad Virus Day * * *

I thought it was just me this morning. I've only been receiving a couple of junk e-mails a day the last few weeks, but this morning I must have deleted a dozen or more, and I've just got in tonight and wiped out another nine.

They carry the same subjects listed by Bill, in slight variations. Several have the "from" field as postmaster@ some site. I also have several messages with attachments, supposedly from MAILER-DAEMON@ some ISP, and a subject of "Failure notice," "Returned mail," or something similar.

hi all, i thoght i was alone on this virus. completely filled up my email box. but not my primary email.paulk, the daemon @ some isp could be webtv that i'm on. it can't infect it, but seems to send itself from the location it was sent with out users knowing it.they should do what they say in "beer for my horses"(country tune) "round up all of them bad boys & sit them down before there maker."like someone said "very little brains & nothing better to do than cause trouble."im

I've wondered if the virus-scan software companies create these things. They are sure big money makers for McAfee and Norton.

Sometimes a patch or service pack from Microsoft can make things worse. They can break things on your Windows install, like devices attached to your machine, or cause some programs or the whole system to crash.

Of course, if you don't install the patch, then you've got the likes of Wormblaster and hackers looking to take advantage of security holes on your system. Darned if you do and darned if you don't.

MacWire

Bill

I received over 60 of these at my Yahoo address and many of them were addressed to look like they came from members of the Mike Holt site. Several of them were from Don's address, a couple from Wayne's and I don't remember who elses right now. All of them had the senders IP of 65.241.212.227. I also received a couple of sent mail returned messages saying that messages I had sent were undeliverable. The problem I have with that is I don't use this Yahoo web email account to send mail. I only use it when I have to register for sites and don't want to use my primary email address.

Curt

Well, I'm at about 1,000 for the day (18hrs) between virusses and false notifications of emails I supposedly sent. Addresses like Photos@, Afilliate@, Info@ etc. are not 'legitimate' email boxes in that they can't ever send mail, the system won't let it. (they can only receive it)

I think it's been decided to just reject any email with an attachment of .scr or .pif from now on as it doesn't seem to be slowing down any.

Curt,

I've got the same complaint. These things root through an infected computer and send emails to addresses they find and make them appear to be from another address that they find. It fools a lot of people. I've gotten some very angry emails from some people that thought I sent them a virus. But I had nothing to do with it.

Bill

[This message has been edited by Bill Addiss (edited 08-19-2003).]

One problem is that the FROM field in an e-mail can contain whatever the sender cares to place in it. There's no check, the field just gets passed through the system intact.

I had several "Failed delivery" type messages in my box late last night, which aroused my suspicions immediately. The only e-mail I sent yesterday was to Bill, and I know he received it correctly.

P.S. Checked my e-mail only two minutes ago, but two more messages arrived while I was typing this post. One is "returned mail" from some MAILER-DAEMON again, the other from a cryptic address NAVMSE-LZNTSRV1 something or other, telling me that Norton Anti-Virus has detected a virus in an e-mail I just sent. Yeah, right.


[This message has been edited by pauluk (edited 08-20-2003).]

I dumped Norton on this box, and bought the Panda Antivirus Platinum 7.

This dang thing updates itself daily, and is catching around a dozen new virus/worm signatures everytime it updates.

I have Macafee on the other boxes and it seems to let some things slide by and only catches the virus after there is a problem.

I'm using the Panda firewall, but haven't been overly imporessed with THAT, and am gonna put zone alarm pro back in.

This has been a bad summer for viruses and hackers, etal.

Bill,

Ughh...tell me about it. I just got through deleting 96 (that's right, NINETY SIX) of these things with those exact topics (I think one or two were from people I recognized).

Didn't even bother opening them -- just hit the "D" key on my console and held it down all the way.

The messages for Viagra and "enhancers" were also decimated in the conflagration.

I woke up to 61 e-mails.

Maybe we, as a group, should track down the individuals responsible for everything from Viagra and enlargement e-mails to viruses and put them through a battery of electrical experiments, such as resistance testing through human tissue. There are many unanswered questions about resistance - questions which could be answered with extended testing. Volunteers such as these e-mail senders and virus distributors are crucial to the advancement of society through testing on their bodies.