Spam/virus from this member...?

[KEVINS]

Who is this?
buicksx2@aol.com

I have received approx 24 emails since yesterday afternoon that SPAM GUARD caught from this person. Who is it and do they have a virus that keeps sending them to me or is it my computer?
I have received spam emails from what appears from other Buick members also (Jim Testa). As of Thursday I have been averaging approx 300 spam emails a day... WTF????

ks

 

[JRSGN]

I can Assure you that he's not sending them... I spoke to him & he said he's getting them too...

If you want I'll drive to his house & Kick his A$$ for you ....

 

[KEVINS]

WOULD YA??!!!??!! THAT WOULD BE GREAT!!!...LOL..

I know he's not sending them but I had to block his email address (and others) so I don't get anything from him.

Could my computer be infected? I am receiving all of this spam all of a sudden..

 

[ACME RACING]

Virus

Lot of our club members have gotten these too....It's the " Sobig " virus that gets in E-mail addresses and sends them out , like rabbits multiplying I get returned e-mail I sent, problem is, I NEVER sent any E-mail to these people . Don't even know who they are..... ..... So, hope it goes away soon..... At least my Norton Anti-Virus program catches them and quarantines them .....

 

[KEVINS]

I have gotten 16 spam emails since I posted this thread. These are going to fill up my mail box several times today unless I clean it regularly...

what a pita... Oh well at leaset they do get separted into my Bulk Mail box..

 

[Chuck Leeper]

SOS here too!!

I just got back online on Thurs from a crash on 8/28.. Since then I've had AT LEAST 100 "returns" and virus "alerts" from my NORTON system.
Also, mine are from people I don't know, have never sent mail to, etc...
I just booted up about 10 min ago. I had 10 e-mails.. 6 were virus alerts and "returned mail"..

It's a$$holes like that punka$$ slob in Minn or Wi that the FBI nailed, that cause stuff like this.. His fat a$$ should be "married to bubba" for about 10 yrs.. Maybe then he'd get the hint...

Can U tell I'm pi$$ed off??

Hey Rich! knock this off!!! [j/k.. Rich didn't do it...for once!]
BTW, I also have an outgoing scan by NORTON on all my e-mails..so it AIN'T me either!!

 

[Buicksx2]

Hi Fellas,

TRUST me I am not sending these out at all. I am getting bombed with them too, heck I even got one from myself.

A few weeks ago I got a ton from Keith Mease, I know he didnt send them so I just hit the delete.

Sorry for the aggravation but if I could stop em I would.

Course I'll just continue sending them to Chuck only.......lol.....just kidding.

Thanks again.

 

[KEVINS]

That would be kewl if we can all redirrect them to Chuck!
hmm, I'll have to set that up somehow..

Lets' show him some real TB.com LOVE!! hehee..

 

[GNandGS]

If you look at the header info you will probably see the same IP address sending this to you under diff "email" accounts.

If you are behind a firewall, just deny access from that particular IP. In my case it was one IP address for a while then after THAT was taken care of, a second IP was sending them all. So far so good! Been good for about a week after blocking both addresses... if it happens again we will block the entire class C! grr.

Depending on who your ISP is, you may be able to get some assistance from them.

This is one time Im really glad that the mail server/firewall I use is in my basement.

Shawn

 

[Chuck Leeper]

Will do..

Shawn, thanks for the HU.. going to write them down and see how many I get.. then I'll put them in the firewall,[NORTON] blocking list.

 

[striker_29]

You guys need to run the stinger as I can almost assure you that your system is infected:

http://vil.nai.com/vil/stinger/

 

[ChrisCairns]

I'll never understand why Chuckypoo is bitching....

If it wasn't for spam and virii he wouldn't get any email.

 

[Chuck Leeper]

Stinger??

Striker, that's the program my cousin uses at the Justice dept. I've already run it, and it came back a clean scan...

I've written down the Ip's of the main offenders... 6 locations w/ 13 hits.. that's just today..

Chris is jealous! Unless his cousin Steve W., sends him a love letter, he gets nothing but spam...But then, he may not like Spam, but seems to really go for goat meat!

 

[Rogue Leader]

yeah thats the sobig virus... if your name is in someone adress book and they get infected your name is used for spam... I been getting the crazy returned mails toio!! GRRR!

 

[GNandGS]

Re: Will do..

Originally posted by Chuck Leeper
Shawn, thanks for the HU.. going to write them down and see how many I get.. then I'll put them in the firewall,[NORTON] blocking list.

This will only work if your firewall is before your email server. In this case it is a server at "bellsouth.net". SO! This will probably not work for you. You CAN however report these IP's to your provider if you wish... prolly wont help tho. In your case the only IP's you can block are the ones at bellsouth... lol you dont wanna do that.

Instead, I suggest you setup some rules or filters such that even tho the email comes thru, it goes unnoticed - deleted before you see it. Then just wait the storm out.

Im sorry this was unclear earlier... I mentioned the IP thing because ISP's vary and sometimes you can get them to help you... also some folks on here have that kind of control over their email.

Shawn

 

[Chuck Leeper]

Got it!

Shawn, thanks for the help. I tried to get the firewall set up, not available, as you said it would not be.
I then went to Outlook Express, tools, message rules, and entered the offenders addy.. So far there's not been any hits that I've seen. It seems to be working OK.
Thanks

 

[Ratman]

It's definately Sobig.F

I'm Matt Smith, Bug Hunt Moderator over at chevelles.com. The virus/Trojan/worm problems got so bad over there we had to set up a forum just to deal with that alone. I work in the computer security field so I deal with this crap 24/7.

 

[efi-street]

Originally posted by striker_29
You guys need to run the stinger as I can almost assure you that your system is infected:

http://vil.nai.com/vil/stinger/

Just because you get these emails or someone else gets them with your name on them doesn't mean that you are infected. Unlike many of the virii out there, this one will clone someone else'S email address in the header to make it look like it comes from someone else.

 

[Ratman]

Originally posted by efi-street
Just because you get these emails or someone else gets them with your name on them doesn't mean that you are infected. Unlike many of the virii out there, this one will clone someone else email address in the header to make it look like it comes from someone else.

Dead on EFI