posted
My Details, Your Details, Your Application, Wicked Screensaver, That Movie, (and) Thank You.
This list of email headings is all over my email proggie. I hadn't checked my email in a week or so and BLAM over a hundred of them all with the same headings and all containing .pif files I'm supposed to open to see "the details". This seems awfully suspicious to me.
Some of them come from Letterheads:
Sonny Franks
Karen Sartain
signjon@...
Adrienne
twinsign@...
cheryl19541@...
jumperz@...
darkhorseart@...
docwelty@...
brushwoodstudios@...
(2 from) walldog@...
rtart1@...
simonallen@...
mikemeyer @...
(3 from) Lazerlines@...
I just got off from my day job and have to race off to letter a another toter. I don't have time to scan the BB for clues to this issue, right this minute. I can check back around 9 or 10 tonight and see if anybody has responded to this.
I have not opened any of these files, and would like to know what is going on. I didn't even have most of these email addresses before this occured and am hoping I just have a typo in a Letterhead profile, am missing a good movie, people really like me, and my (secret) alternate personality is trying to get attention by filling out applications online whilst I'm asleep, and that there is a really kewl screensaver out there I'm not privy to...however, I'm scared this might be some kind of email virus and would love some advice.
The only email proggie this has happened in is my Eudora account. It has not come through MSN or Yahoo.
posted
HiYa Linda I do not send or recieve any "files" via the internet from any body! Yes even family that is usally CUTE to look at. Customers are required to fax me a ROUGH draft for my approval that I would even want to do said work. No Hoaxes,Disk Space,or Download Time is worth the harm and money to fix the problem. DELETE everything. If information is that IMPORTANT to the sender,they will re-send
-------------------- PKing is Pat King The Professor of SIGNOLOGY Posts: 3113 | From: Pompano Beach, FL. USA | Registered: Nov 1998
| IP: Logged |
posted
Linda, for goodness sake don't open ANY of them. There has already been some discussion on this issue. See Dave Grundy and Rick Chavez posts a bit further down. I use Norton and that detects them but I have to press finished and then delete and then the next one comes straight in. After that I empty my Delete bin. I also emptied my address book (which I will never use again) hoping to stop it spreading. Elaine this virus is called the Sobig virus which attacks email through address books, the blaster virus is an internet worm. I honestly don't know where we go from here as I haven't been able to find out how to stop it from coming in. I did try to adjust my preview settings but they still keep coming and from what I can gather they are mostly letterheads.
-------------------- Drane Signs Sunshine Coast Nambour, Qld. dranesigns@bigpond.com Downunder "To err is human, but to really foul things up requires a computer" Posts: 965 | From: Nambour, Qld. Australia | Registered: Nov 1998
| IP: Logged |
posted
Linda, The latest internet virus...SoBig.f...is a bug that spawns emails from anyone who has been infected by it. I just barely got it about 3 hours ago from Classmates.com and just barely finished cleaning it off.
For all those who read this post, this bug has already broken all the records. It has infected 1 in every 16 computers world wide. Essentially it uses your computer to spread itself with YOUR email program.
...from the Macafee web site...
A new variant of W32/Sobig, W32/Sobig.f@MM is a High Risk mass-mailing worm. It arrives as an email attachment with a .pif or .scr extension. When run, it infects the host computer, then emails itself (using its own SMTP engine) to harvested email addresses from the victim's machine. In addition, when it propagates, the worm "spoofs" the "from: field", using one of the harvested email addresses. So exercise care when opening emails with attachments. An infected email can come from addresses you recognize.
Because it sends so many emails, a worm like Sobig also saps bandwidth and slows network performance. Worse, it can also open up a user's computer port, making it vulnerable to hackers, who can plant dangerous Trojans. These malicious programs often let unauthorized users remotely take over a system, steal personal information or use the infected PC to send spam.
posted
David..I opened Norton Anti-virus, hit "options>e-mail protection" and set it to not even bother trying to fix the virii...just set it to immediately "delete". Thanks Diane Crowther!!!
-------------------- Dave Grundy retired in Chelem,Yucatan,Mexico/Hensall,Ontario,Canada 1-519-262-3651 Canada 011-52-1-999-102-2923 Mexico cell 1-226-785-8957 Canada/Mexico home
posted
Thanks Dave and Elaine for your help. I think I may be above ot for now.
-------------------- Drane Signs Sunshine Coast Nambour, Qld. dranesigns@bigpond.com Downunder "To err is human, but to really foul things up requires a computer" Posts: 965 | From: Nambour, Qld. Australia | Registered: Nov 1998
| IP: Logged |
It scanned *all* my files and disinfected 22 files
My puter has a clean bill of health now.
The software is $19.US dollars.
Good Luck! -Rich
-------------------- Richard Bustamante Signs in the Pines www.signsinthepines.com Posts: 781 | From: Nevada City, California | Registered: Nov 1998
| IP: Logged |
posted
Sheeeeessssh! Just got back from FKAB and had tons of Email...full of the SoBig Virus! Luckily Notron Antivirus caught and deleted them! BUT I am scanning my puter...just to make sure!
If we find that %$$#$@#@# that wrote it, I will volunteer to grab one of his ankles, and have someone like John D grab the other one, and we will wish ...just like on a chicken wishbone....that he splits in half!!!!
-------------------- Si Allen #562 La Mirada, CA. USA
(714) 521-4810
si.allen on Skype
siallen@dslextreme.com
"SignPainters do It with Longer Strokes!"
Never mess with your profile while in a drunken stupor!!!
Brushasaurus on Chat Posts: 8831 | From: La Mirada, CA, USA | Registered: Nov 1998
| IP: Logged |
posted
We'll check our system tonight but as of the weekend we were clean...I haven't sent any e-mail to you...sorry for the inconvenience...I'ma at a loss and haven't a clue how you got anything from us.
-------------------- "Werks fer me...it'll werk fer you"
posted
SOBig is a really powerfull virus. It scans the entire hard drive for any file with an extension used by emai programs such as address books and other ways email addreses are stored.. And it scans for URLs to.
Then it sends itself out to all email addresses it can find. IT acts as its own email server. Then it randomizes the email subjects so your machine thinks its all new emails but is actually only from one person. It then sends itself out to any URL it can find. It don't matter. No one will ever really know where it comes from.
It keeps on sending them out as fast as your machine can produce them. Thousands of them in just minutes.
good luck.
-------------------- Leaper of Tall buildings.. If you find my posts divisive or otherwise snarky please ignore them. If you do not know how then PM me about it and I will demonstrate. Posts: 5278 | From: Im a nowhere man | Registered: Jul 2001
| IP: Logged |
posted
Linda, I didn't send you anything and, in fact, don't have you in my address book. I haven't received a single "sobig" e-mail, so apparently, either my ISP's virus program or my Norton is catching and deleting them. Anything that comes from this computer is scanned and I keep up to date on virus definitions. Delete 'em all and make sure you install a firewall and virus protection.
-------------------- www.signcreations.net Sonny Franks Lilburn, GA 770-923-9933 Posts: 4117 | From: Lilburn, GA USA | Registered: Feb 1999
| IP: Logged |
posted
Thank you Richard, I used that PANDA link and it scanned my entire computer and fixed my virus problems. It found 6 files that had BUGBEAR and TROJANS. No download necessary and as simple to use as a brush is for me, directions were very simple. It took a while to scan 90,000 files but an hour later it was bug free.
Thank you again I'm happy again
-------------------- HotLines Joey Madden - pinstriping since 1952 'Perfection, its what I look for and what I live for'
>>Sonny Franks You should read how this virus works. This thing creates its own e-mail server. Then makes up fake users using one's address book, so it may *appear* that you've sent an e-mail, when you actually didn't. It may very well be one person who keeps sending this thing.
>>Joey Madden I finely did something right. huh? Your lucky, only 90K files. My puter has over 350K files, and took all afternoon to scan, and to top it off, I have to do it again. Damn!
Questions: Has anyone recieved an e-mail with a Signs in the Pines domain? (info@signsinthepines.com)
If you delete your address book, will it search for people you usually send e-mail to?
How can we as a hole, help get rid of this virus? (between us)
Epilog:
If you have any question about the health status of your computer, please use the above link. Help rid Letterville of this thing!
...in the heart of gold country...
-------------------- Richard Bustamante Signs in the Pines www.signsinthepines.com Posts: 781 | From: Nevada City, California | Registered: Nov 1998
| IP: Logged |
Turns out I had to work till 3am and then run a lap in the shower, take a two hour nap and go back to my day job this morning. I've been walkin sideways for the past couple of hours and am totally amazed by this thing. I got 54 more emails in just now. I'm going to bed now and will address this tomorrow. Friday is my birthday and it would make a nice present to know we could stop it collectively!
Thank you for all your replies! And Monte, Sonny, et all, I didn't think you sent them to me...I figured something was awry. I deleted them and when I can see the screen with a bit more clarity I will tend to my end of things.
I'm going to fall over now, have a great night in chat tonight! LOL
posted
Si buddy, you just call me. Im ready! I hear that suckers bones cracking already!
-------------------- Maker of fine signs and other creative stuff. Located at 109 N. Cumberland ave. Harlan, Ky. 40831 606-837-0242 Posts: 4172 | From: Ages-Brookside, Ky. Up the Holler... | Registered: Jul 1999
| IP: Logged |
![[Big Grin]](biggrin.gif)
<
![[Razz]](tongue.gif)
![[FYI]](graemlins/fyi.gif)
this virus is called the Sobig virus which attacks email through address books, the blaster virus is an internet worm. I honestly don't know where we go from here as I haven't been able to find out how to stop it from coming in. I did try to adjust my preview settings but they still keep coming and from what I can gather they are mostly letterheads.
![[Thanks]](graemlins/thanks.gif)
![[Dunno]](graemlins/dunno.gif)
![[Smile]](smile.gif)
I'm happy again![[Mad]](mad.gif)
![[Roll Eyes]](rolleyes.gif)
![[Applause]](graemlins/clap.gif)
Printer-friendly view of this topic