Any viruses going around??

[Scott Atk]

I've been getting a lot of strange emails with attachments from addresses with buick, v6, turbo, stage, and turbotransam in them. Anybody else getting them? I haven't opened anything up yet.

 

[MeanBuicks]

Yup...

'Mydoom' worm at large

 

[2QUIK6]

Yep, I got them too and then I got a ton of rejects come in my inncoming mail from turbo.... and GN..., looked like it was the TR mailing list. I think arizonagn is where I got it from....
Used Norton Anti virus to remove it and I'm cured now.
Go to your active tasks and see if you have "readme.scr" running, if so kill it, then find the file using the search function and delete it along with any emails that contained it.
Got another worm from one of my customers too, luckily it didn't get launched, it was the Beagle worm.

 

[Buick From Hell]

Any viruses going 'round?

Funny you should ask...

I've had no less than SEVEN different viruses bombard me in the last month, FOUR of 'em in the last 4 days!!!

There's Novarg, welchia, blaster, aladinz, Dumaru, Beagle, and one other I can't remember (it's at home) ALL this month!

Since yesterday, I've been getting an average of 2 viruses PER HOUR emailed to me, AND I'm getting a lot of "returned" e-mail, meaning my e-mail address is being spoofed...


hackers suck

 

[2QUIK6]

Originally posted by Buick From Hell
AND I'm getting a lot of "returned" e-mail, meaning my e-mail address is being spoofed...

Kevin, that means you have one of the virus'. They get into your system and use their own SMTP connection to start emailing everyone on the planet through your email connection, and when one rejects, you see it in your incoming email then. It doesn't actually send out the emails from your email software (such as Outlook), but does use your email address, so the rejects come back to you. It uses its own embedded emailer thats part of the virus. Hopefully you have Norton Anti-Virus or Macafee, pull down the latest defs and run a full scan of your system and it should find them and delete them.

 

[GN One Day...]

No, it doesn't mean HE has the virus. It means that the person with the virus has his email address on their hard drive. Not even necessarily in their address book. The virus finds a random email address on your HD and puts it in as the "reply" email address. That helps hide where it really comes from and bounced email goes to that random address instead of back to the infected computer. That way that person doesn't get tipped off that they have the virus and it can keep on sending itself out.

 

[mike85gn]

Here is some basic information on a new virus that has been circulating on the Internet:

W32.Novarg.A@mm is a mass-mailing worm that arrives as an attachment with the file extension .bat, .cmd, .exe, .pif, .scr, or .zip. When a computer is infected, the worm will set up a backdoor into the system by opening TCP ports 3127 thru 3198. This can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources. In addition, the backdoor has the ability to download and execute arbitrary files. The worm will perform a Denial of Service (DoS) attack starting on February 1, 2004. It also has a trigger date to stop spreading on February 12, 2004.

Also Known As: W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend]

Note: Symantec Consumer products that support Worm Blocking functionality automatically detect this threat as it attempts to spread.

 

[Pressure-Less]

Yeah, MYDOOM is on the prowl and reproducing like the wild rabbits in Austrilia did. Always have your AV definitons up-to-date.
Here is a link to an active worm sensing and immobilizing program. It is a free download for a 30 day trial, after you must purchase. I have used/purchased several programs from this company. They are one of the best in the world at what they do in the security arena IMO. Look at the WormGuard program.
Check out some of their other program applications.

Drew

 

[2QUIK6]

I was getting the same reject msgs, pulled the latest virus defs and sure enough, the virus was found on my machine, so I'll bet it is on there somewhere.

 

[Pressure-Less]

Yeah, MYDOOM is on the prowl and reproducing like the wild rabbits in Austrilia did. Always have your AV definitons up-to-date.
Here is a link to an active worm sensing and immobilizing program. It is a free download for a 30 day trial, after you must purchase. I have used/purchased several programs from this company. They are one of the best in the world at what they do in the security arena IMO. Look at the WormGuard program.
Check out some of their other program applications.

http://diamondcs.com.au/

Drew

 

[Buick From Hell]

I WAS infected by one of the viruses, but that was my laptop, which is hooked to my desktop thru a proxy server...

I even scanned the infected file with my Norton before I opened it, and it showed it as clean...problem was, my virus definitions were 5 days old, and the virus was newer than that!

But, I was infected for only a couple of hours...