Virus? - Fly Fishing Forum
Worldwide Flyfishing Discussion Talk flyfishing with members around the world!

Reply
 
Thread Tools Search this Thread Rate Thread Display Modes
  #1  
Old 05-06-2002, 08:12 PM
MarkDoogue's Avatar
MarkDoogue MarkDoogue is offline
Flyfishing on the brain..
 
Join Date: Oct 2000
Location: Weymouth, MA
Posts: 520
Virus?

Yesterday I received a strange message titled, "Congratulations, Smdoogue", supposedly from Juro. I received virtually the same email from someone else today.

It automatically tried to open itself via my Windows media player. I shut it down and deleted the message.

My brother mentioned that he got a suspect email from one of the board members as well.

Anyone else having a problem?
__________________
~Mark Doogue
Reply With Quote Quick reply to this message
Sponsored Links
Advertisement
 
  #2  
Old 05-06-2002, 08:42 PM
JimW JimW is offline
Registered User
 
Join Date: Feb 2000
Location: As long as it's Salty
Posts: 1,795
I've seen a couple of messages infected with Klez.. lately but not from the board. Network associates virus scan squashed them. Make sure you configure it for download scan and scanning of internet mail attachments.
Reply With Quote Quick reply to this message
  #3  
Old 05-06-2002, 08:43 PM
fredaevans fredaevans is offline
Registered User
 
Join Date: Nov 2001
Location: Rogue River
Posts: 3,856
Thank God, not yet! But ...

was the e mail external or one of the "PM's" via the board?
fe
Reply With Quote Quick reply to this message
  #4  
Old 05-06-2002, 08:47 PM
juro's Avatar
juro juro is offline
Coast2coast Flyfishaholic
 
Join Date: Jan 2000
Location: Steelhead country|striper coast|bonefish belt
Posts: 20,585
Sorry I didn't get back to you, I've received literally hundreds of these virus-generated emails from members, non-members, members@somewhere.com, someone@anywhere.com, etc. After your email and another from Bob I checked out both my home computer and work computer with McAfee's latest version. I also ran the Norton AV tools on my laptop at work in addition to McAffee. My laptop came out clean but the home computer had a virus which was eliminated by McAffee.

I believe this is the W32.Klez virus going around like wildfire. It "spoofs" the sender email among other things. If anyone hasen't already loaded the virus protection software and scanned your computers it might be something to consider.

I don't use outlook at all, so I am not sure if I was actually generating them or not. I do know there are a lot of computers out there that are!

Judging by the number of mails I receive I suspect there are a lot of people out there who have the virus on board. Reading the macaffee.com site or the symantec site helps you detect them.

The software I just purchased (in addition to Norton corporate) was McAfee Virus Protection Online for ~$30 bucks per year.

I still think it's a scam to get people to buy Virus Protection!
Reply With Quote Quick reply to this message
  #5  
Old 05-06-2002, 09:04 PM
juro's Avatar
juro juro is offline
Coast2coast Flyfishaholic
 
Join Date: Jan 2000
Location: Steelhead country|striper coast|bonefish belt
Posts: 20,585
After typing this I just went to my email inbox to check messages. I had a message from ME at an old non-existent email address that was eliminated years ago.

I do not have in any mail programs containing that email address, so must assume it was generated on someone's computer who had that email address in their address book.

Klez spoofs the sender, so it's impossible to tell who actually sent the email as far as I know.
Reply With Quote Quick reply to this message
  #6  
Old 05-06-2002, 09:14 PM
FrenchCreek's Avatar
FrenchCreek FrenchCreek is offline
Registered User
 
Join Date: Jan 2000
Location: Bow River in Calgary
Posts: 865
I received two identical Emails
one from "Juro" and one from an unknown?
both messages had an attachment
the message heading is "A Very New Game"
I deleted both before opening the attachment.
My virus scanner(NortonAV) scanned the messages but did not ID them as virus
__________________
Pete AKA Frenchcreek from Calgary
Reply With Quote Quick reply to this message
  #7  
Old 05-07-2002, 06:33 AM
doogue's Avatar
doogue doogue is offline
Wanna be striper bum
 
Join Date: May 2000
Location: Manchester, NH
Posts: 646
I have received 8 or 10 suspect e-mails - including one from ssully - but mostly from non-Forum sources. I even received one from my e-mail account at work (I use a Unix workstation!) and I know that this computer is not infected.

I finally updated my virus scanning software last night and it did not find any of the W32.klez flavors. Which is a good thing.

I agree that the virus scanning software producers do have some sort of role in the proliferation of viruses. So be it - I bought the software anyway because anyone that has had a virus (computer or otherwise) knows that it can be a true pain in the patootie.

Later.

-Mike
Reply With Quote Quick reply to this message
  #8  
Old 05-07-2002, 07:20 AM
FlyFishAR's Avatar
FlyFishAR FlyFishAR is offline
Registered User
 
Join Date: Mar 2002
Location: White River Arkansas
Posts: 312
Viruses

I learned my lesson early on viruses. Anyone with an unprotected email address is asking for trouble. I probably now get 2 viruses a week. You can do a free virus scan to detect viruses at www.commandcom.com or www.commandsoftware.com

All these will do is "detect" a virus.

John
Reply With Quote Quick reply to this message
  #9  
Old 05-07-2002, 07:20 AM
Roop Roop is offline
Registered User
 
Join Date: Jan 2000
Location: Any
Posts: 1,260
THis brings up an issue for me re: spam & viruses.

I use Netzero for my connection as modems are all we can get in my area. To report spam to them, of which I now receive about 5 a day, I need to open the email & forward it to them. Seems to me that I'm exposing my self to viruses.

Should I just break down & pay to update my McAfee or would anyone recommend another program?

Thanks.

Roop
__________________
Reply With Quote Quick reply to this message
  #10  
Old 05-07-2002, 10:21 AM
JimW JimW is offline
Registered User
 
Join Date: Feb 2000
Location: As long as it's Salty
Posts: 1,795
Let's not forget that email is not the only conduit for destructive/invasive programs. Don't forget a firewall when attempting to protect your system. There's a good freebie available from zonealarm.com and mcafee has a package that includes both a virus scanner and firewall. No matter what you do to protect the system it is best to run a regular archival backup on critical files.
Reply With Quote Quick reply to this message
  #11  
Old 05-08-2002, 08:18 PM
MarkDoogue's Avatar
MarkDoogue MarkDoogue is offline
Flyfishing on the brain..
 
Join Date: Oct 2000
Location: Weymouth, MA
Posts: 520
I just cleared 39 files infected with W32/Klez and 2 with W32/Elkern.C.

Thanks for the Command Software site FlyFishAR.
__________________
~Mark Doogue
Reply With Quote Quick reply to this message
  #12  
Old 05-08-2002, 08:27 PM
FlyFishAR's Avatar
FlyFishAR FlyFishAR is offline
Registered User
 
Join Date: Mar 2002
Location: White River Arkansas
Posts: 312
W32/Klez

Mark:

Just to double check that site just "DETECTS" the virus. You have to buy software that will cure it. Second an anti virus software cannot disenfect files in programs that are currently running. From what I know the Kelz series of viruses attach in the windows directories so you ahve to go into safe mode before disinfecting your system to get them all. If you run the scan again it can tell you if you have any more of the little buggers.

John

ps: I know less about computers than I do about fly fishing so you might ask for expert help.
Reply With Quote Quick reply to this message
  #13  
Old 05-08-2002, 08:38 PM
MarkDoogue's Avatar
MarkDoogue MarkDoogue is offline
Flyfishing on the brain..
 
Join Date: Oct 2000
Location: Weymouth, MA
Posts: 520
Yeah, I took them up on their one time scan&disinfect for $3.95.

Thanks again.
__________________
~Mark Doogue
Reply With Quote Quick reply to this message
  #14  
Old 05-08-2002, 08:47 PM
juro's Avatar
juro juro is offline
Coast2coast Flyfishaholic
 
Join Date: Jan 2000
Location: Steelhead country|striper coast|bonefish belt
Posts: 20,585
Just to remind folks, the messages sent by an infected party are addressed "from" a fabricated source. If you receive a message "from" somebody, they are the least likely address from where the message came, contrary to what we have been conditioned to think. You should avoid generating any animosity for the spoofed "from" address, it may sound odd in this community but you would be surprised how much of that angst has been going around.

There is only one party to blame, the hacker who sent this out... although the anti-virus companies are hard to eliminate since they are the ones who gain.

The worst offender is the message that describes the risks and offers a link to "email them" for a cure. That link is a binary I suspect is the virus program. Whatever you do, don't open any attachments unless you're 100% sure of it's origin... I guess now that the "from" address is spoofed it's hard to tell that as well.
Reply With Quote Quick reply to this message
  #15  
Old 05-08-2002, 10:38 PM
ssully's Avatar
ssully ssully is offline
Registered User
 
Join Date: Jan 2000
Location: PI Guy
Posts: 736
Quote:
Originally posted by doogue
I have received 8 or 10 suspect e-mails - including one from ssully - but mostly from non-Forum sources. I even received one from my e-mail account at work (I use a Unix workstation!) and I know that this computer is not infected.

I finally updated my virus scanning software last night and it did not find any of the W32.klez flavors. Which is a good thing.

I agree that the virus scanning software producers do have some sort of role in the proliferation of viruses. So be it - I bought the software anyway because anyone that has had a virus (computer or otherwise) knows that it can be a true pain in the patootie.

Later.

-Mike
Mike,

Lemme know the email address that you got from me that was infected. Send it to work sean_sullivan@vibren.com
Thanks.
Reply With Quote Quick reply to this message
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Fly Fishing Forum forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in

Human Verification

In order to verify that you are a human and not a spam bot, please enter the answer into the following box below based on the instructions contained in the graphic.



Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
virus on flyfish.com! chromer Worldwide Flyfishing Discussion 10 07-02-2006 01:16 PM
Virus Alert juro Worldwide Flyfishing Discussion 3 03-16-2004 09:58 AM
Another Virus JimW Worldwide Flyfishing Discussion 2 12-05-2001 02:10 PM
New Virus striblue Worldwide Flyfishing Discussion 4 02-13-2001 12:50 PM


All times are GMT -5. The time now is 06:51 PM.



Copyright Flyfishingforum.com (All Rights Reserved)