Virus Warning

Ray Montee (RIP) · Post by **Ray Montee (RIP)** » 26 Jan 2004 7:21 pm

Hi Folks: During the early evening hours of Monday, Jan. 26th, I rec'd a series of Emails with various recipient names, etc.
One was addressed to b0b at my jbfc....
Another was addressed to me at jbfc....
while 3 or 4 others had various vague names as recipients.
One was from: fuyona @ public and the subject was listed as "test".
Another was from: listener at att.net

All were 32 kb.

Just wanted each of you to be on the alert. Last spring I was deluged with more than 37 viruses all within about five days following a controversial post on the forum.
I'm NOT branding the forum..........but pro-viding a word of caution to all. The Forum is the only place that is aware of the jbfc.

b0b · Post by **b0b** » 26 Jan 2004 10:30 pm

I've received about 30 copies of this new one in the last 12 hours. Folks, just delete it. Whatever you do, don't open the attachment.

Titles I have seen on the email include:
"Hi"
"hello"
"HELLO"
"test"
"Error"
"Status"

------------------
<img align=left src="http://b0b.com/Officeb0b.gif" border="0"> Bobby Lee
-b0b- quasar@b0b.com 

System Administrator

b0b · Post by **b0b** » 26 Jan 2004 10:31 pm

Another one just arrived, with the title "Server Report".

b0b · Post by **b0b** » 26 Jan 2004 10:34 pm

Here's a clue: One of the return addresses is tubefex-unsubscribe@egroups.com. Anyone here belong to the tubefex discussion at egroups.com? You might be infected.

CrowBear Schmitt · Post by **CrowBear Schmitt** » 27 Jan 2004 3:07 am

i've gotten 10 (so far)of these Novag viruses
none of these from forum members or friends of mine

Symantec does it's job so i'm ok
listen to b0b - Do Not Open any of these!
there are two other viruse too:
MimailQ w/ "Hi my sweet Nancy"
Dumarv w: "important info for you " + my photo.zip
more here: http://www.cnn.com/2004/TECH/internet/01/26/mydoom.worm/index.html
[This message was edited by CrowBear Schmitt on 27 January 2004 at 03:09 AM.]

Donny Hinson · Post by **Donny Hinson** » 27 Jan 2004 3:48 am

Attention...(Some of you apparently don't know this!)

Where a virus comes from is totally meaningless! Viruses "spoof" (or steal) their "From:" and "To:" e-mail addresses from your address books, so if you get something suspicious...or something that contains a virus...

Just delete it!

Telling us "where it came from", or who sent it to you is useless...nothing but a waste of time.[This message was edited by Donny Hinson on 27 January 2004 at 03:50 AM.]

Mickey Adams · Post by **Mickey Adams** » 27 Jan 2004 8:04 am

Yeah, I got them too,didnt scan them just deleted them. Old Dog wise to new tricks!

b0b · Post by **b0b** » 27 Jan 2004 8:35 am

Where a virus comes from is totally meaningless! Viruses "spoof" (or steal) their "From:" and "To:" e-mail addresses from your address books, so if you get something suspicious...or something that contains a virus...

Not totally meaningless, Donny. That "From:" address usually came from an email or address book on the infected machine.

Chances are, an infectee at one time received mail from the Tubefex eGroup. That's how the virus obtained that address.

I'm moving this to the 'Computers' section.

------------------
<img align=left src="http://b0b.com/Officeb0b.gif" border="0"> Bobby Lee
-b0b- quasar@b0b.com 

System Administrator