posted
I have gotten about 50 emails in the last three days with the W32.Yaha.F@mm virus attached. So far I have discovered that two of the address are Bob Gilliand and Paul Gilling (who I didn't know lurked around here).
This is crazy because it comes to me as an undeliverable message mostly about Yacht Name Lists. Problem is, other than Bob Gilliand, none of those people are in my address book and Norton says I'm clean as well as my ISP.
Please run an UPDATED virus scan on your systems. Someones got a virus and it's getting out of hand.
Here are a few of the names I've seen so far: alan AT daycreek DOT com bgilliland AT inknowvativegroup DOT com breinhard AT herald DOT com checkfriends AT friendscr DOT com PGILLING AT aol DOT com
Thanks!
[ September 23, 2002, 02:25 PM: Message edited by: Amy Brown ]
-------------------- Amy Brown Life Skills 101 Private Address Posts: 3502 | From: Lake Helen, FL, USA | Registered: Feb 2001
| IP: Logged |
posted
Hiya Amy, I've been getting the same messages but not as many as you. I thought it would be someone here, but wasn't sure. Unfortunately, with the way my system is set up, I can't read the full address of the sender.
Havin' fun, Checkers
-------------------- a.k.a. Brian Born www.CheckersCustom.com Harrisburg, Pa Work Smart, Play Hard Posts: 3775 | From: Harrisburg, Pa. U.S.A. | Registered: Nov 1998
| IP: Logged |
posted
Me too Amy. One was from Paul Gilling and the other from Mike Meyer. I realize it isn't these people sending them out but someone here has a virus!
Amy, please edit your message so the email addresses you listed can't be harvested. An example would be:
bgilliland AT inknowvativegroup DOT com
The way many email addresses get on lists is from spiders crawling link to link through the web and searching for items that look like email addresses.
-------------------- Best Regards, Mark Smith EstiMate Sign Pricing Software It's Not Luck. It's EstiMate.™ http://www.EstiMateSoftware.com 1-888-304-3300 Posts: 724 | From: Asheville, NC, USA | Registered: Nov 1998
| IP: Logged |
Amy sent me an email earlier today regarding this issue. I’m posting the content of my reply to her here for others to digest. For those of us on the M$ platform, unfortunately, it’s the nature of the beast for the foreseeable future. It’s been said here in the past and will be said again in the future. Develop a sound strategy for dealing with these interruptions and stick to it. Part of that strategy should include a solid anti virus program and the discipline to keep the definitions updated. Even if the machine is not “wired” to the net, I still strongly encourage clients and folks I converse with to have some type of AV software running and keeping it current.
¤¤¤¤¤¤¤¤¤¤¤¤
Amy
Thanks for bringing this to my attention.
Sorry to hear of the virus trouble. It won't make you feel any better, but you're not alone. Our anti virus solution has been working overtime in recent days. These "mass mailing" type virus appear to be somewhat cyclical; running from industry to industry, dying down then flaring up again in another market segment or social circles or in a "morphed" form of the original.
I tired of all the interruptions in daily workflow and have changed my software to "dump" these things automatically. I do receive a daily report of the prior days activity (and archive them) so that I can keep track of what is happening. This mornings report had 27 infections of just the "w32.yaha.f@mm" alone for the 24 hour time period of 9/22/02 1:00am to 1/23/02 12:59am and a total of 34 infections in general for the same time frame.
I feel very confident that the particular problem you are experiencing did not generate from our email server nor is it being propagated via that server. The type of virus that has been hounding you for the last few days is typical of one that gains addresses from various sources and utilizes them on a random basis. So it is very possible for a "contact" to be included in what you are receiving without that "contact" ever being aware or involved. It takes just one instance of "my" (or your) address saved on one "infected" machine and a long time (if ever) for it to be "gone".
I operate on a two prong approach here for email based virus issues. On incoming mail, our mail server has one package of anti virus software running, then each machine interacting with that server has a different package. The exact opposite path is used for outgoing mail. First it goes through one package out from the email client, then a separate package out from the server. The additional outbound steps are what make me feel confident that we aren't propagating the mess on our mail server. But please note, that is "feel confident" and not 100% sure.
Best piece of advise I feel that can be given in this regard is to have a good anti virus package installed and be disciplined to keep up date with the definitions. (very easy to do with most packages now a days) Have it integrated with your email software client of choice and to check not only every piece of incoming mail, but outbound as well. Our virus software scans every possible "input" path at time of input (electronic or physical) and does a complete system scan every morning at 1:00am. If that doesn't help, you could always jump to the Mac platform!! (HaHa)
-------------------- Bob Gilliland InKnowVative Communications Harrisburg PA, USA
"The U.S. Constitution doesn't guarantee happiness, only the pursuit of it. You have to catch up with it yourself." Benjamin Franklin Posts: 642 | From: Harrisburg, PA, USA | Registered: Nov 1998
| IP: Logged |
posted
Yup, I'm getting them too. What a drag. Everyone run a complete system scan on their computer.
-------------------- Kimberly Zanetti Purcell www.amethystProductivity.com Folsom, CA email: Kimberly@AmethystProductivity.com
“Organizing is what you do before you do something, so that when you do it, it is not all mixed up.” AA Milne Posts: 3723 | From: Folsom, CA | Registered: Dec 2001
| IP: Logged |
posted
Yeah..they are arriving here too. Just opened my e-mail program..NOT Outlook Express...and tyhere were 5 messages...All 5 contained the virus! Just glad Mr. Norton is on the job and up to date!
-------------------- Dave Grundy retired in Chelem,Yucatan,Mexico/Hensall,Ontario,Canada 1-519-262-3651 Canada 011-52-1-999-102-2923 Mexico cell 1-226-785-8957 Canada/Mexico home
posted
Does this one arrive with some goofy headline, or what? Is there a way to tell if it slipped by your virus scan, or does it run its course without you needing to open it?
-------------------- Steve Burke Cascades Inc NS Canada
If at first you don't succeed, skydiving isn't for you Posts: 359 | From: NS Canada | Registered: Jan 2002
| IP: Logged |
posted
We took a bold step at Rapid Tac Inc. and disconnected all of our PC network from accessing the internet. Now, any email we deal with, and all internet connections, are done on Macs. WOW what a difference. Not only are 99% of the virus programs benign to a mac, the new email program even filters out all of the junk mail.. We've never been happier.
-------------------- Jeff Bailey Rapid Tac Inc. Grants Pass, Oregon Posts: 231 | From: Grants Pass, Oregon, USA | Registered: Feb 2001
| IP: Logged |
![[Eek!]](eek.gif)
Printer-friendly view of this topic