Page 1 of 1

Possible 'Forum' virus alert

Posted: 26 Nov 2001 4:19 pm
by Ron Castle
I have recieved e-mail containing a suspicious file attached from various Forum
members. Norton anti-virus (using the latest definitions) say its a VIRUS.
The e-mails have had various 'subjects' relating to Forum posts of the past.

see this link
here

Posted: 26 Nov 2001 7:13 pm
by Ray Montee
See AL MARCUS, are you trying to reach me?
Same topic as this.

Posted: 26 Nov 2001 8:08 pm
by Brad Bechtel
Yes, it is a virus (actually a worm), and it's hit Forum members particularly hard judging from my email. Here's the thread in the Computers section, which includes a couple of links where you can get help:
http://steelguitarforum.com/Forum12/HTML/000765.html


------------------
Brad's Page of Steel
A web site devoted to acoustic & electric lap steel guitars


Posted: 26 Nov 2001 10:24 pm
by Bobbe Seymour
Yep, I can't open any e-mail because of this. My virus aleart won't let me open any attachments.
www.steelguitar.net

www.bobbeseymour.com <FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by BobbeSeymour on 26 November 2001 at 10:25 PM.]</p></FONT>

Posted: 27 Nov 2001 1:20 am
by chas smith
After we're done in Afganistan, we should hunt down the sphincter-boys that do this kind of stuff.

Posted: 29 Nov 2001 6:47 pm
by Al Marcus
My McAfee virus scan 6.0 took care of the one in my computer. All is well again....thankfully...al Image Image<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by Al Marcus on 29 November 2001 at 06:48 PM.]</p></FONT>

Posted: 30 Nov 2001 3:34 pm
by Antolina
Yes this worm/virus seems to prevading the whole country. My daughter's'puter picked on up and it went crazy playing mix and match with her email. Al apparently had one that found it's way to me. I'm fairly certain my anti virus picked it up. The onl protection fro my perspective is to GET SOME ANTI-VIRUS SOFTWARE!! There are some programs that allow one to track the originator but it's beyond my level of expertise.

Posted: 1 Dec 2001 9:14 am
by Dougie Hodge
Me too. Got one a few days ago from W.C. with _steelwc. Hotmail scan said atts. were a virus, not to open them. I haven't heared from W.C. yet. I sent him a e-birthday card, don't know if he received it or not. Nov. 28th was his birthday! Happy Birthday W.C.!!! Thanks, Dougie Image ________________________________________________ '70 Emmons Original P/P D-10, Evans SE-200, Alesis Midiverb 4 Image "Steel Rocks!!!!" Image<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by Dougie Hodge on 01 December 2001 at 09:14 AM.]</p></FONT>

Posted: 1 Dec 2001 12:06 pm
by b0b
My email programs are configured so that they never automatically open anything - not even the email itself. I get a list of emails, and I have to double-click each item to view it. It there's an attachment, I have to deliberately open that as well. Nothing is automatic.

This method has served me well to date.

On this recent spate of "Re:" messages, I've been clicking "Reply" without opening the message first. That way I can warn the sender without any risk of opening the attachment, because the attachment isn't included in quoted replies.

------------------
<img align=left src="http://b0b.com/coolb0b2.gif" border="0"><small>
</small> -b0b-   <small> quasar@b0b.com </small>
-System Administrator<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by b0b on 01 December 2001 at 12:06 PM.]</p></FONT>

Posted: 2 Dec 2001 10:53 am
by Janice Brooks
got 2 more this morning and one looks like it's from John Lacy.


------------------
Janice "Busgal" Brooks
ICQ 44729047

Posted: 2 Dec 2001 9:52 pm
by b0b
I've had a few people ask me if the Forum is causing this recent email worm virus. The answer is NO.

The worm is spreading among steel players' machines because we all have each other in our address books and in our email archives. When someone runs the attachment, the worm sends itself to every address it can find in the victim's email system.

The Forum server (which runs Linux, not Windows) has not been infected, and my two Windows computers have not been infected. I don't run attachments, and I don't even preview suspicious emails.

I have received MANY copies of this worm, because my email address is in nearly everyone's system. I'm tempted to block all messages with a title of "Re:".

Some of the emails have legit sounding titles, though. The worm sends itself as a reply to unanswered emails sometimes. I got one today with the title "Re: The Steel Guitar Forum has Moved". I sent out that original email to all Forum members over a year ago. The worm sent itself back to me as a reply.

------------------
<img align=left src="http://b0b.com/coolb0b2.gif" border="0"><small>
</small> -b0b-   <small> quasar@b0b.com </small>
-System Administrator