Page 1 of 1

Someone out there has a SERIOUS infection!!!

Posted: Wed Aug 20, 2003 4:05 am
by Warhorse
I'm getting 173 ******* e-mails, ALL with attachments to my matrix e-mail account, anyone that has my addy check your virus software, 'cause this **** is ******* me off, I'm gonna cancel that **** account, gotta sit through God knows how long till they are all DL'd!!!!:mad: :mad: :mad: :mad:

Goddamn ****** off Warhorse:mad:

Posted: Wed Aug 20, 2003 5:31 pm
by Rhodan
I sense some hostility? Negative vibes perhaps?:D

Posted: Wed Aug 20, 2003 5:44 pm
by Belisarius
Eh, at least I'm innocent.

Warhorse you ol' Huzzar - smack up an e-mail filter! :D

Posted: Wed Aug 20, 2003 6:02 pm
by Warhorse
Yes, lot's of hostility, everyone should have virus protection!!! Belisarius, It's kinda hard to filter, since there are a lot of different subject line types, this thing constantly is sending to my mail, about one every so many minutes!! At least I found out how to delete the whole shbang at the server level!! Am working on getting some filters set up though, this is a real PITA!! Later,

Warhorse

Posted: Wed Aug 20, 2003 7:30 pm
by Grenadier
I'm having the same problem but I have a program called Mailwasher that is able to filter out the Virus dectected messages from Matrix and the virus's on the mail server so I do not have to download the mail. www.mailwasher.com

Thanks alot, Brent!!!

Posted: Wed Aug 20, 2003 7:55 pm
by Warhorse
I'll surely implement this little gem tonite!!

Warhorse

Posted: Wed Aug 20, 2003 8:16 pm
by Procrustes
We just got this from systems support at work - may explain what is going on.

===========
"Many folks are currently are seeing the result of SOBIG.F. SOBIG.F is a worm that propagates by mass-mailing copies of itself using its own Simple Mail Transfer Protocol (SMTP) engine. It collects email addresses from files found on the infected server. The worm will fake the FROM field using an email addresses found on the infected machine so that its email messages appear to originate from one source but was actually sent from another. If the worm emails a copy of itself to an incorrect or invalid email address, a message will be returned to the faked address and not the original address that sent it. Many people will receive notices that their email could not be delivered or was infected when in fact they were not the ones to send the email in the first place. We are protected against this worm but unfortunately others may not be. We will continue to see annoying emails as a result of this worm until September 10th, when the worm shuts itself down."

Posted: Wed Aug 20, 2003 8:34 pm
by tracer
I've found that the best defense against e-mail worms and virii is to not use Outlook Express...its the biggest 'target', so most of these a**holes write their malicious code to specifically exploit it.

just an observation

Posted: Wed Aug 20, 2003 8:41 pm
by Frank W.
yep. got some of them ( 20 ) or so, too.

all yesterday. today not a single one.

but i´m not infected checked w/ 2 actual virus scanner, as well i´m not using M$ internet explorer, outlook or win XP/2000..

that are the mostly targeted systems from the acuall worms/viruses...

Posted: Wed Aug 20, 2003 8:43 pm
by tracer
Originally posted by Procrustes
We just got this from systems support at work - may explain what is going on.

===========
"Many folks are currently are seeing the result of SOBIG.F. SOBIG.F is a worm that propagates by mass-mailing copies of itself using its own Simple Mail Transfer Protocol (SMTP) engine."


If this is true, then a firewall like Zone Alarm (its free, and blocks programs attempting to access the internet from your computer) should stop it from propogating and alert you to its presense.

Posted: Thu Aug 21, 2003 12:36 am
by Belisarius
What baffles me the most is that this virus is spread as a frickin' ordinary attachment to a mail.

Standard rule #1: If you don't know the sender DON'T KLICK ON THE GODD*MNED ATTACHMENT! :mad: :rolleyes: :mad:

What is it with people these days anyway? "oooh it's such a pretty pretty attachement....I've just GOT to open it... "

LOL!!!

Posted: Thu Aug 21, 2003 3:15 am
by Warhorse
No sh1t Belasarius, it does boggle the mind!!! I can see some dumbass clicking on each of every 173 attachments,-"gee, people sure love me today, lets see what my details are, ooooh, a wicked screensaver, hmm, that one didn't do anything, let me try the next one, hmm....!!!:D :D

Warhorse

Posted: Thu Aug 21, 2003 7:59 pm
by Bernie
Originally posted by Grenadier
I'm having the same problem but I have a program called Mailwasher that is able to filter out the Virus dectected messages from Matrix and the virus's on the mail server so I do not have to download the mail. www.mailwasher.com


I've been using the Pro version of this for many months now. I wouldn't be without it.

Posted: Fri Aug 22, 2003 3:40 am
by bchapman
Originally posted by Grenadier "I'm having the same problem but I have a program called Mailwasher that is able to filter out the Virus dectected messages from Matrix and the virus's on the mail server so I do not have to download the mail. www.mailwasher.com "

I think it should be http://www.mailwasher.net

Posted: Fri Aug 22, 2003 4:49 pm
by m10bob
I had to visit a business in St joe Mo Wednesday and their entire internet server was down because some SLOB went in early and hooked up his infected lap top to their server cord..Affected all 800 employees their,(not to mention everybody who might have been affected by those 800!!!!!!!)Thank God for Mcafee and "daily updates" whenever a new worm comes down the pike!

What one is better.

Posted: Fri Aug 22, 2003 5:28 pm
by Jack
I know what a firewall is but I am not sure about the mailwasher. Is it true that the more programs you have running the slower your PC? Should you have both programs or one or the other? Do you guys use both?

Tech Head solution...

Posted: Sat Aug 23, 2003 4:48 am
by challenge
I got this from a tech site a couple of years ago. It doesn't stop you receiving them, but it prevents a mail bug from sending email to someone else and alerts you to the fact you have a virus.

In your email address book enter a new contact with an email that starts with the characters across the top of the numbers ( ##, or $$). Use this as the display name as well. This will automatically go to the top of the list because of the way file names are handled.

When the bug tries to send an email it sends to the first addy and, because it's an invalid address, it generates an error message in your in box. The program stops running because of the error and you can run a viral scan to find it.