Jullian Winston, you've got a virus!

Frank Parish · Post by **Frank Parish** » 17 Jun 2003 10:18 am

Jullian,
I got an e-mail from you in my yahoo e-mail box that I'm sure was not intended for me. It was a conversation between you and somone else about Curly Chalker using Reeces amps after he'd blown some Sho-Bud amps. The message contained an attachment that had a virus. This should be of concern to you and anyone receiving e-mail from you. I didn't open the attachment. Forum members beware!

Chippy Wood · Post by **Chippy Wood** » 17 Jun 2003 11:23 am

Hi Folks,
I got that e mail tonight but I deleted it straight away looks like someones causing mischief.

------------------
Ron (Chippy) Wood
Carter S10/Pad

George Brown · Post by **George Brown** » 17 Jun 2003 1:23 pm

I also got the e-mail, and deleted it. Everything seems to be working OK, so I guess it didn't affect my computer.

George

Winnie Winston · Post by **Winnie Winston** » 19 Jun 2003 9:04 pm

This is the story.

oops!
My reply went through twice!

I just erased the first one.

JW[This message was edited by Winnie Winston on 19 June 2003 at 10:41 PM.]

JB Arnold · Post by **JB Arnold** » 19 Jun 2003 9:17 pm

Here we go again.......

The virus DID NOT COME from the person it appears to be from. It's an e-mail worm-if you reply to the message you only make it worse. Getting steamed does no good. This happened about a month ago. Terry Wendt was the innocent bystander. Relax, it will work it's way through the system in a couple of days.

Ahhh but watch-this will fall on deaf ears and pretty soon we'll have a dozen threads going throwing accusations around. Just wait.

JB

------------------
Fulawka D-10 9&5
Fessenden D-10 8&8
Mullen Royal Precision D-10 8 & 5
"All in all, looking back, I'd have to say the best advice anyone ever gave me was 'Hands Up, Don't Move!"
www.johnbarnold.com/pedalsteel
www.buddycage.net

http://www.nrpsmusic.com/index.html

Winnie Winston · Post by **Winnie Winston** » 19 Jun 2003 9:39 pm

Folks!
I too received the same e-mail, and was most surprised.
I work on a Mac and have no virusus. If I did, the Mac cannot transmit them to PC machines.
This is the story:
I was communicating with Paul Graupp. He asked something about Chalker, and I replied.
Then this e-mail come quoting the first few lines of the message I sent to Paul.
It comes from my NAME but at an address I do not have. I have no account with yahoo by that name.
Obviously, whoever's machine started this has:
1. The message
2. An address book with addresses of many of those on the SGF list.

I do not have the message on my machine. It was tossed as soon as it was sent.
I have NO steel players in my address book. My address book is very small (only about 10 names) all family.

As soon as I received the mail I contacted Paul. He says his machine is clean, but will check again.

I am sorry to seem to be causing such a problem. I assure you I am NOT behind this at all.

JW

Eric West · Post by **Eric West** » 20 Jun 2003 12:15 am

Yup. Macs don't get 'em.

Best way to check for worms is have the first addy in your addy book to something phony like ~Aardvark@whatever.cob. The minute something sends a letter to it you'll get a failure notice.

Then there's the flashlight....

EJL

David L. Donald · Post by **David L. Donald** » 20 Jun 2003 12:35 am

It's good to get notified, but it is typicaly not the "senders" machine with the problem.
There are scumbags who harvest addresses just from peoples address books just to use for viruses etc.
They send them out with trojan horse programs on to other peoples computers and servers that then remotely send it out and make people think it's another persons.

They want to cever their tracks and make as much confusion as possible... low lifes.
Just dump'm and get on with life.[This message was edited by David L. Donald on 20 June 2003 at 01:37 AM.]

Carl West · Post by **Carl West** » 21 Jun 2003 6:48 am

I got the same e-mail !

Carl West

Frank Parish · Post by **Frank Parish** » 22 Jun 2003 12:09 pm

No harm done here as far as I know. I never opened the attachement so it faded away hopefully.

Jody Carver · Post by **Jody Carver** » 22 Jun 2003 2:17 pm

I have "hemmorhoids" who sent them??

Graham Griffith · Post by **Graham Griffith** » 23 Jun 2003 11:45 pm

Jody,

it was probably sent by Aster Oid.

Dave Van Allen · Post by **Dave Van Allen** » 24 Jun 2003 5:57 am

hey, that's LADY Aster-oid to you pal...

Wiz Feinberg · Post by **Wiz Feinberg** » 4 Jul 2003 9:58 am

Here is what may have happened.

The Klez Worms are among the most widespread in current distribution on the Internet. I have cleaned up several computers for clients who received a Klez infection.

Klez Worms propagate by searching the victim's hard drive for an addressbook, or equivilant record of contact addresses. It uses its own SMTP engine to send out email without your knowledge and inserts random names from your contact list of email addresses into the From line, and sends these emails to other recipients found there. Random TO: and random FROM:, but all from names stored on the infected computer.

Most of the time a Klez infected computer can continue to operate almost normally, for months at a time. I repaired one that had been infected three months prior to my arrival. The only problem that the client was experiencing was a general overall slowdown in the opening of programs and windows, and a lot of unexplainable hard drive activity while he was on AOL.

In the three months his computer may have sent out thousands of infected emails to people in his AOL addressbook. He notified all of his contacts about the incident after I cleansed the computer.

Summary: Klez Worms send out unseen emails, without storing copies in your SENT folder, all containing executable attachments, to random recipients, with random From addresses and random From names. The Worm does damage some Windows system files on the Host computers, clogs up email servers and causes a lot of hard feelings from recipients who blame the wrong people for sending the Worms.

If you haven't guessed already, I am a virus hunter-killer in my computer troubleshooting business.

------------------
Bob "Wiz" Feinberg
AIM Screenname: Wizcrafts
Sho~Bud Super~Pro with 10 and 10, L710s and aluminum fingers from Bobbe Seymour. Nashville 400 amp.
Keep Steelin' but don't get caught[This message was edited by Wiz Feinberg on 04 July 2003 at 11:01 AM.]

b0b · Post by **b0b** » 5 Jul 2003 9:43 am

Moved to 'Computers' section of the Forum