The Letterville BullBoard: I guess someone hates me!!!!!

This is topic I guess someone hates me!!!!! in forum Old Archives at The Letterville BullBoard.

To visit this topic, use this URL:
http://www.letterville.com/ubb/ultimatebb.php/topic/13/1629.html

Posted by Dave Grundy (Member # 103) on :

And that doesn't really bother me too much. I figure that a person doesn't get to my age without having a few people hate him.

This is the situation. Since early November I have been recieving a certain e-mail that contains a virus. Same title, same sender each time, about once or twice a week. The interesting thing is thatwhen we went on vacation the messages stopped arriving at my regular e-mail address and started arriving at my Mexican e-mail address. Now that I am home they have started to arrive here again.

Again, I am not complaining, but I just thought I would mention that if the anonymous sender is someone who reads this bullboard they are just wasting their time. My anti-virus program catches it every time and since I am on a DSL internet connection, my virus definitions are updated every time my computer is turned on.

Just thought I would do a good deed and save whoever it is that is sending the e-mails the trouble of continuing to do so. You are just wasting your time!

------------------
Dave Grundy
AKA "applicator" on mIRC
"stickin' sticky stuff to valuable vessels and vehicles!"
in Granton, Ontario, Canada
1-519-225-2634
dave.grundy@quadro.net
www.quadro.net/~shirley

Posted by roger bailey (Member # 556) on :

Good show Dave !!
I love it when someones "bitter little under the door" plan dosn't work !!
More power to you dave for being the ADULT !
I'm probably gonna regret this but, I have been so fortunate not to have been "hit" with any, my daughter was down with major troubles for weeks and thought she had spread it to my computor.

Though I was un effected, many of her friends and associates were not so lucky !
Just keep laughing at this person,and traveling in the right directions !
Roger

------------------
Roger Bailey
Rapid Tac Incorporated
Waikoloa, Hawaii

Posted by Ken Henry (Member # 598) on :

Just curious Dave, as to how they might have obtained your mexican e-mail address. Do you have some sort of mail forwarding feature that would forward it automatically? If not, then it would have to be someone who KNEW what that Mexican address was, and you probably gave it out to a very few. That might narrow down the list of possibilities a significant amount.

Hope that you get this little mystery solved.

------------------
Ken Henry
Henry & Henry Signs
London, Ontario Canada
(519) 439-1881
e-mail kjmlhenry@home.

Some days you get to be the dog....other days, you get to be the fire hydrant.

Posted by Neil D. Butler (Member # 661) on :

Welcome back dave.. When are we going to see some photos of the nice Bikini Clad Girls from your trip? I have some extra snow in front of my shop.. do you want some?
Neil

------------------
"Keep Positive"

SIGNS1st.
Neil Butler
Paradise, NF

Posted by Steve King (Member # 771) on :

I have also been getting alot of viruses lately, about once a week or so. They are all the same, something about Snow White and the seven dwarfs.

Luckily my virus checker catches them each time, but they are annoyingly frequent.

Did we piss the same people off Dave????

------------------
Steve King
Taylor Signs Ltd.
Calgary, Alberta
Hey, we just turned 100 Years old!

Posted by Dave Grundy (Member # 103) on :

Steve..That's the one!!!

Posted by Pierre St.Marie (Member # 1462) on :

See, Dave?.......I TOLD you that you and Shirl should've taken me with you!

------------------
St.Marie Graphics
& Makin' Tracks Sound Studio
Kalispell, Montana
stmariegraphics@centurytel.net http://www.stmariegraphics.com
800 735-8026
We're chiseling every day of the week! :^)

Posted by Sarah Clark (Member # 413) on :

Dont forget that these email virii send themselves without the knowledge of the person who they come from. They are recieved in an email and then they use the persons address book to send out a message and the virus to everyone in it.

You might contact everyone who knew your email in mexico and get them to check if they have the virus sending from their computer without their knowledge

------------------

Posted by Dave Grundy (Member # 103) on :

Good point Sarah. Thanks...I will send a message to all of the folks who e-mailed me at that address.

Posted by Kelli (Member # 248) on :

Dave, I got the same e-mail about a week ago. I figured it must have been one of the two people whose e-mail I received around the same time as the infected file that had inadvertently passed it along. Does anyone know if that's how they work?

------------------
Kelli Cajigas aka Janda
Dolphin deSigns & Banners
“A satisfied customer will tell two friends, a dissatisfied customer will tell ten.”

Posted by Stephen Deveau (Member # 1305) on :

Sorry to hear this..
Remember that when someone gets a sliver under their nail it starts to fester..
They should be a Gentleman or Lady that can walk away from this..
Virus sending is not the why to settle a argument...(or disagreement)
Words never killed anyone,only made for better and skilled conversation.

Raven/2001

------------------
Raven/2000
Airbrushed by Raven
Lower sackville N.S.
deveausdiscovery@sprint.ca

[This message has been edited by Stephen Deveau (edited February 08, 2001).]

Posted by Si Allen (Member # 420) on :

Dave...tell your ISP about it and have them trace it back! They CAN and WILL find them!

------------------
Si Allen #562
La Mirada, CA. USA
(714) 521-4810
ICQ # 330407
"SignPainters do It with Longer Strokes!"

Brushasaurus on Chat

Gladly supporting this BB !

Posted by Adrienne Pereira (Member # 1046) on :

Dave I think someone tried to send one to me too yesterday...I cannot remember what it was called as I immediatly deleted it. All I remember was the sender was 'hahaha' and the file was an .exe It was some cutesy name, but I can't recall what it was.

I don't have a virus checker right now but I make it a habit to be paranoid.
Adrienne

------------------
Adrienne Morgan
Splash Signs
www.splashsigns.com
"Rainkatt'

Benicia, CA
707-746-7847 (shop)
707-550-4553 (voicemail)
adrienne@splashsigns.com

Posted by cheryl nordby (Member # 1100) on :

I got that same one. (hahaha.) I didn't open it, because I didn't know the sender.

------------------
surf or MoJo on mirc
Cheryl J Nordby
Signs by Cheryl
(206) 300-0153
Seattle WA.....!
signsbycheryl@hotmail.com
A day without sunshine is like, you know...night http://signsbycheryl.homestead.com/home.html
http://mojosignco.homestead.com/home.html

Posted by George Perkins (Member # 156) on :

yep, got the hahahaha dwarf4you a few weeks back

------------------
George Perkins
Millington,TN.
goatwell@ionictech.com

"I started out with nothing and still have most of it left"

http://goatwell.tripod.com

Posted by Henry Barker (Member # 174) on :

Hi Dave,

I posted awhile ago that I had the virus W95.Hybris.gen, after opening the second snowwhite mail I had, I thought it was someone having some fun with me, the e-mail address is always ....@sexyfun...It is a worm virus that attaches itself to a file in your system files folder the file name is wsock32.dll even if you have the latest virus programs Norton will not quarantine it remove or delete it if its in your system file section you have to "restore" a new version of that file from your Win 98 or whatever OP level CD you are on. I did this an had no more problems, but figured it came from here, so somebody here has it and doesn't know they have it. It downloads up dates plugins for itself from the nut so it can change as its master wishes which makes its potential further down the line more interesting! It is easy to remove if you follow Translabs post on my post www.letterhead.com/ubb/forum1/HTML/011106.html In the meantime it picks addresses in your address book at random and sends mail out at the same time you might be sending to other people.....clever eh!

So the world is not as sinister as you might think!

I never mailed you in Mexico and the virus was on my machine for less than 12 hours, (nightime) and we did no mailing during that time, I don't have your mail address in my address book. I suggest all check their wsock32.dll file for virus!

------------------
Henry Barker #1924
akaKaftan
SignCraft AB
Stockholm, Sweden.
A little bit of England in a corner of Stockholm
www.signcraft.se
info@signcraft.se

Posted by Mark Fair Signs (Member # 289) on :

okay dave,
i hate you.... after seeing that wonderful mirror sign you and miss shirley did.
displayed at Jimmy's Dixie Letterhead Meet.2000

i would never intentionally send you a "bad" file.

be careful dave,

mark

------------------
Mark Fair

Mark Fair Signs
http://www.markfair.com

Home of "Sign of the Month
http://www.markfair.com/signomonth.html

2162 Mt. Meigs Road
Montgomery, Alabama 36107
334-262-4449

mark@markfair.com

"Mark Fair is a Proud Contributor to The Letterhead Site!"

Posted by Dave Grundy (Member # 103) on :

Henry...I have Norton AV 2001 and I get automatic updates pretty much every other day or so. It has detected this virus about 20 or 30 times so far, always before I even know that the e-mail is there, and doesn't allow me to even view it until I have quarantined it, on both my main computer and on the laptop. It can't "fix" the file but it quarantines it and then I delete it each time.

Posted by Bob Rochon (Member # 30) on :

Dave,

A freind of mine has been getting about 100 - 130 e-mail viruses a day for the past 3 days.
It seems as if someone has hacked the data base of the Snapper lawn mower company and has been sending them to all the dealers. He has been using a small program that lets him see the e-mail on the server before he downloads them. That way he can delete it before he downloads it into his computer.

If you are interested, e-mail me and I will send you that program.

Good luck
Bob

------------------
Bob Rochon
Creative Signworks
Millbury, MA
bob@creativesignworks.com

"Some people's kids"

Posted by Dave Grundy (Member # 103) on :

OK...I recieved an e-mail today from a fellow who suggested I try right clicking on the e-mail in question. I use Eudora as my default e-mail program but in Mexico I used Outlook Express for that e-mail address. Sure enough, right clicking on the "Snow White" e-mail, then clicking on "details", gave me the name of the actual person who sent it. I have sent that person an e-mail informing them of the fact that they probably have the virus. It is a person who visits this Bulletin Board, but we have never met and to my knowledge neither of us have ever posted on even the same message thread. So I am assuming that it is the virus at work and not an act of sabotage after all...

Posted by Colleen Henderson (Member # 906) on :

Hi Dave, I got it too end of Jan but never opened it as I didn't recognize.

------------------
Colleen Henderson
Signs Now, Thunder Bay, ON
signsnow@tbaytel.net

Posted by Dennis Veenema (Member # 833) on :

Okay since I'm in the computer shop today, a few points about this virus.

It was first found about 6 months ago but widespread infestation occured about 2 months ago when a large number of ISP's throught US & Canada had their mail servers hacked into (including mine - we still don't know how). Everyone with a mail account got the bug. Most infected ISP's informed their customers, but some just don't care.

It's an annoyance virus (I think Symantec has it rated as a 4 on the risk scale with low damage).

It will not infect unless opened, but once opened attaches itself to all your addresses, and sends itself automatically.
It will also attempt to connect to a virus server and update itself.

Most anti-virus software will detect it and allow you to delete it. However even if you don't have anti-virus you can simply delete it. Just remember to first delete it from the inbox then from deleted items.

Henry I don't know why your Norton didn't detect it; you better check your settings.
Even machines with 1 year old versions detected it and allowed deleting.

Once infected you really have two options: re-format the drive, or remove it from your registry. Since it is a registry creeper it has to be removed line by line, and even then it's not guaranteed. The girl who works for me has done a few but it's a tricky job to get the whole thing. And as far as we know nobody has a fix that will get the whole thing, either.

And just to add to the fun there are now a few new variations with different payloads.

My best advise to anyone who gets it is to simply block the sender, and if it's someone you know to tell them why you blocked them.

And please - RUN ANTI VIRUS SOFTWARE!
And don't cheap out either!

------------------
Dennis Veenema
The Sign Shop
Dresden, Ont.
&
GigaBytes Plus
"Where the plus is the service!"

Posted by Sarah Clark (Member # 413) on :

seems i got the snow white and dumped it too last week. I also use the Pop3scan Mailbox program where i can see whats on the server and delete without even downloading. I am very careful and so far have never had a virus. search for pop3scan mailbox and you will find where to download it, its free.

------------------

Posted by Cheryl Lucas (Member # 1656) on :

Henry:

I know so little about the inner workings of the computer, so tell me:

If I have a file called Wsock32.dll, does that mean I have the virus? If not, when I find the file what am I looking for?

Cher.

------------------
Cheryl Lucas a/k/a "Shag" on MIRC
Vital Signs & Graphics, Etc.
Cape Coral, Florida
VSignsNgraphics@aol.com

Posted by Dave Grundy (Member # 103) on :

Cheryl...That file, Wsock32.dll, is apart of the Windows operating system files. DO NOT DELETE THAT FILE. The virus, if you had it, would attach itself to that file and modify it. The best way to find out if you have a virus is to go to any of the anti-virus websites, like Norton or McAfee, and use their free internet virus check. But that is no substitute for buying a good anti-virus program that autoamtically updates itself any time you are online.

Posted by Cheryl Lucas (Member # 1656) on :

Thanks Dave,

I did a virus scan and we checked out okay. I use Norton and do a live update once a week. Just wanted to make sure...

Cher.

------------------
Cheryl Lucas a/k/a "Shag" on MIRC
Vital Signs & Graphics, Etc.
Cape Coral, Florida
VSignsNgraphics@aol.com

Posted by Mike O'Neill (Member # 470) on :

So how's the Tan Dave ???

I've been getting 'snow white' emails regularly since early December. Gone past the point of being annoyed with it. I simply delete it along with all the other spam I receive. I don't think the repeated sends are personal, probably some kid with a bot set up which emails the virus to a list (probably large) of recipients periodically. Mine come from 'hahaha@sexyfun.net' a reverse search has revealed nothing ...
The virus itself is a fairly nasty one, but is well known and my antivirus softwares have no problem with it. I have noticed a great increase in the number of unsolicited emails that I receive lately that contain attachments, I don't even know if they contain viruses because they get deleted immediately, irregardless of the file type ...
I do think the problem is going to get a lot worse. Make sure your anti-virus softwares (plural) are up to date, and if you have a cable or dsl connection, a firewall is a good idea.

------------------
Mike O'Neill

Trans-Labrador Signs
Labrador City, Labrador

'Durn vinyl won't stick to ice'

moneill@labrador-west.com

"The best things in life aren't things"
Art Buchwald

Posted by VICTORGEORGIOU (Member # 474) on :

I Got that snow white message too, but erased it without opening the attachment.

Maybe the common ingredient is this website.

Spam in general has gone way up in the last few months. It appears to have started about the time I signed up for EBay. I don't think EBay gives out this info, but scarfing up email addresses off EBay is no big deal.

Someone out there thinks I am broke. I get about two debt consolidation spams a day.

Erase before reading seems to be the safe practice for the now. Vic G

------------------
Victor Georgiou
Bob Loves Signs Inc
Danville, CA
email blssign@pacbell.net

UBB.classic™ 6.7.2