Possible 'Forum' virus alert

Ron Castle · Post by **Ron Castle** » 26 Nov 2001 4:19 pm

I have recieved e-mail containing a suspicious file attached from various Forum
members. Norton anti-virus (using the latest definitions) say its a VIRUS.
The e-mails have had various 'subjects' relating to Forum posts of the past.

see this link
here

Ray Montee · Post by **Ray Montee** » 26 Nov 2001 7:13 pm

See AL MARCUS, are you trying to reach me?
Same topic as this.

Post by **Brad Bechtel** » 26 Nov 2001 8:08 pm

Yes, it is a virus (actually a worm), and it's hit Forum members particularly hard judging from my email. Here's the thread in the Computers section, which includes a couple of links where you can get help:
http://steelguitarforum.com/Forum12/HTML/000765.html

------------------
Brad's Page of Steel
A web site devoted to acoustic & electric lap steel guitars

Bobbe Seymour · Post by **Bobbe Seymour** » 26 Nov 2001 10:24 pm

Yep, I can't open any e-mail because of this. My virus aleart won't let me open any attachments.
www.steelguitar.net

www.bobbeseymour.com [This message was edited by BobbeSeymour on 26 November 2001 at 10:25 PM.]

chas smith · Post by **chas smith** » 27 Nov 2001 1:20 am

After we're done in Afganistan, we should hunt down the sphincter-boys that do this kind of stuff.

Al Marcus · Post by **Al Marcus** » 29 Nov 2001 6:47 pm

My McAfee virus scan 6.0 took care of the one in my computer. All is well again....thankfully...al

[This message was edited by Al Marcus on 29 November 2001 at 06:48 PM.]

Antolina · Post by **Antolina** » 30 Nov 2001 3:34 pm

Yes this worm/virus seems to prevading the whole country. My daughter's'puter picked on up and it went crazy playing mix and match with her email. Al apparently had one that found it's way to me. I'm fairly certain my anti virus picked it up. The onl protection fro my perspective is to GET SOME ANTI-VIRUS SOFTWARE!! There are some programs that allow one to track the originator but it's beyond my level of expertise.

Dougie Hodge · Post by **Dougie Hodge** » 1 Dec 2001 9:14 am

Me too. Got one a few days ago from W.C. with _steelwc. Hotmail scan said atts. were a virus, not to open them. I haven't heared from W.C. yet. I sent him a e-birthday card, don't know if he received it or not. Nov. 28th was his birthday! Happy Birthday W.C.!!! Thanks, Dougie

________________________________________________ '70 Emmons Original P/P D-10, Evans SE-200, Alesis Midiverb 4

"Steel Rocks!!!!"

[This message was edited by Dougie Hodge on 01 December 2001 at 09:14 AM.]

Post by **b0b** » 1 Dec 2001 12:06 pm

My email programs are configured so that they never automatically open anything - not even the email itself. I get a list of emails, and I have to double-click each item to view it. It there's an attachment, I have to deliberately open that as well. Nothing is automatic.

This method has served me well to date.

On this recent spate of "Re:" messages, I've been clicking "Reply" without opening the message first. That way I can warn the sender without any risk of opening the attachment, because the attachment isn't included in quoted replies.

------------------
<img align=left src="http://b0b.com/coolb0b2.gif" border="0">
 -b0b- quasar@b0b.com 
-System Administrator[This message was edited by b0b on 01 December 2001 at 12:06 PM.]

Janice Brooks · Post by **Janice Brooks** » 2 Dec 2001 10:53 am

got 2 more this morning and one looks like it's from John Lacy.

------------------
Janice "Busgal" Brooks
ICQ 44729047

Post by **b0b** » 2 Dec 2001 9:52 pm

I've had a few people ask me if the Forum is causing this recent email worm virus. The answer is NO.

The worm is spreading among steel players' machines because we all have each other in our address books and in our email archives. When someone runs the attachment, the worm sends itself to every address it can find in the victim's email system.

The Forum server (which runs Linux, not Windows) has not been infected, and my two Windows computers have not been infected. I don't run attachments, and I don't even preview suspicious emails.

I have received MANY copies of this worm, because my email address is in nearly everyone's system. I'm tempted to block all messages with a title of "Re:".

Some of the emails have legit sounding titles, though. The worm sends itself as a reply to unanswered emails sometimes. I got one today with the title "Re: The Steel Guitar Forum has Moved". I sent out that original email to all Forum members over a year ago. The worm sent itself back to me as a reply.

------------------
<img align=left src="http://b0b.com/coolb0b2.gif" border="0">
 -b0b- quasar@b0b.com 
-System Administrator