posted on February 5, 2004 09:39:04 PM
Now I have said I have no problems with outlook express but since noon to day I have received numerous email failures.
[email protected]. 6 in the past half hour. The emails are for valium, viagra, paxil etc. but I haven't sent them. There are unknown names with my email address. I called my ISP and they said my email address is in someones address book that has a virus. Is there anyway I can find out who has the virus. I don't. I have done housecall twice last month and again tonight. My ISP has my virus protection. I did go in and block that so I don't receive them any more. I think that is my only option.
posted on February 5, 2004 09:47:57 PM
Libra, I wonder if it would help to remove your internet software and then reload it?
You'd probably lose all your stored mail in outlook, though.
I had three of those a few days ago. I'm on AOL and here's what their help page said. I don't know if you're on AOL or not but either way this might be helpful in understanding what's going on.
This is pretty long but thought I should cut/paste the whole thing.
Lucy
Am I Infected? I Keep Getting Messages From a Mailer-Daemon About An Undeliverable Message.
There are two versions of the Mydoom worm, and arrive attached to an e-mail. You are currently protected because AOL automatically scans all incoming e-mail attachments for both versions of the Mydoom worm. If AOL finds an e-mail with one of the worms, the e-mail is returned to the sender (without the worm) to warn the sender that his or her computer is infected.
Both versions of the Mydoom worm "spoof" or fake the sender's address when they send out copies of themselves to infect other computers. The worms use e-mail addresses they find on an infected computer to spoof the sender's e-mail address. Because your e-mail address was on an infected computer that the worm used to send itself out to someone (whom you may or may not know), you get the error message when a mail system rejects an e-mail because the address doesn't exist or it finds a worm or other virus attached to the e-mail.
Generally, these error messages come from "Mailer-Daemon." Just because you are getting these messages doesn't necessarily mean you are infected. Update your anti-virus software and scan your computer for maximum security.
WARNING: If you receive any messages about an undeliverable message that has a file attachment, do not download or execute the file. Simply delete the message.
How Can I Prevent Infection From the Mydoom Worms?
You are currently protected because AOL automatically scans all incoming e-mail attachments for both versions of the Mydoom worm. For maximum protection, however, you still need to be vigilant. The worms arrive attached to e-mails with random sender addresses and random subject lines and body text, or no subject line or body text at all. The name of the attachment is also random. Your computer cannot be infected with either version of the worm unless you download and execute the attached file.
To make sure you are protected, verify that the sender is someone you know and, if you didn't expect them to send you a file, check with them to verify that the e-mail is legitimate. If you receive an e-mail with an attached file from someone you don't know, or an e-mail from someone you know but they didn't send it, do not download the attachment. Simply delete the e-mail.
Finally, run a firewall on your computer. The firewall will notify you of data coming from the Internet that you didn't request, or if the data is coming from a source it doesn't recognize. If you are an AOL for Broadband member, you can download a firewall at AOL for Broadband -- Firewall.
Important: Only e-mail that is sent to an AOL e-mail address (e.g., [email protected]) or e-mail from another AOL member is scanned for viruses. E-mail that is sent to any other e-mail account (such as your work e-mail account) is not automatically protected by AOL. You must run anti-virus software to ensure your computer is protected from known viruses. If you don't have anti-virus software, you can subscribe to McAfee VirusScan Online -- Brought to you by AOL and get the latest updates every time you log on to AOL.
Both versions of the Mydoom worm are mass mailing worms that only affect computers running Windows. They cannot infect Apple computers.
How Do I Know If I Have Been Infected?
If you don't downloaded e-mail attachments or execute programs without verifying their legitimacy, or use Kazaa (a popular file-sharing program), you should not be infected. If you or someone using your computer executed or might have executed a program received in an e-mail recently, or uses Kazaa, you should update your anti-virus software and scan your computer for viruses, worms and Trojan horses.
If you don't have anti-virus software, you can subscribe to McAfee VirusScan Online -- Brought to you by AOL and get the latest updates every time you log on to AOL.
What Do the Mydoom Worms Do?
First, the Mydoom worms install themselves on your computer and alter your Windows startup files to have themselves installed every time you start your computer. After installing themselves on your computer, the Mydoom worms send a copy of themselves to e-mail addresses they find on your computer.
The second version of the Mydoom worm will also scan the Internet for computers that are infected with the original version of the worm, using your computer and your connection to the Internet. If it finds an infected computer, it will delete the original version of the worm and install itself.
Both versions of the worms also install a backdoor program that allows someone to remotely control your computer or have your computer automatically download and execute a malicious program. This program is also set up to start every time you start your computer.
A third file is only created if you use Kazaa, a popular file sharing program. A copy of the worm itself, with a randomly generated name, is placed in your Kazaa shared folder. In other words, you assist in spreading the worm to other computers.
The second version of the Mydoom worm alters a critical operating system file on your computer to prevent you from updating your anti-virus software and Windows operating system. If you subscribe to McAfee VirusScan Online -- Brought to you by AOL, your anti-virus protection will be updated when you log on AOL, even if you are infected with the worm.
Finally, beginning Feb. 1, 2004 and lasting through Feb. 12, 2004, the earlier version of Mydoom will use your computer to launch a denial-of-service (DOS) attack against a business Web site owned by the SCO Group. Beginning the same day but not ending until March 1, the second version of the worm will use your computer to launch a DOS attack against the SCO Web site and Microsoft's Web site.
Where Can I Find More Information About The Mydoom Worms?
AOL's anti-virus partner, McAfee, has more information on the W32/Mydoom @ MM worm and the new variant, W32/Mydoom.b @ MM.
How Can I Protect Myself From Other Viruses, Worms, and Trojan Horses?
The most important steps you can take are to install anti-virus software and a firewall.
Remember, however, anti-virus software must be kept up-to-date to be effective. The instructions on how to update your definitions should be included with the anti-virus software and be available on the software vendor's Web site. For more information, see AOL Keyword: Security.
If you don't have anti-virus software, you can subscribe to McAfee VirusScan Online -- Brought to you by AOL and get the latest updates every time you log on to AOL.
A firewall will protect you from viruses that scan networks for vulnerable computers. Installation and configuration instructions should be included with the firewall software and be available on the firewall vendor's Web site. For more information, see AOL Keyword: Security.
If you are an AOL for Broadband member, you can download a firewall at AOL for Broadband -- Firewall.
posted on February 5, 2004 10:28:37 PM
Thanks OhmyLucy I read all of that and it was quite interesting. If I have virus protection from my ISP as you do from AOL, do you need anything else? I never open emails I don't know who they are from. I don't even open them if I know them. I don't download anything. I have a sister-in-law that keeps sending me forwards some have 10 other forwards attached to them. Those I destroy right away, I don't even open them. They are stupid anyway. She has a habit of getting viruses but sometimes overlooks her virus protection. Then wonders why her computer goes down. Some people should not have computers. Cell phone yes not computers. Do I still need another virus protection besides my ISP. My ISP says no. I have no firewall. I have windows 98. I use instant messaging all the time so email is very sparce at my house. I get very few spam (maybe 2 a day) as it is filtered out before hand. Thanks for all your answers. Every once in a while I need a little help and I know if I come here you are all great...
posted on February 5, 2004 10:41:13 PM
Libra, one of your "email" friends has the virus and it is using YOUR email address from THEIR address book. Last time I had this happen, I emailed all of my friends and told them to check their computers for the virus.
I'm sure when glassgrl wakes up in the morning she cans end you a free site of virus checkers you can direct your friends to.
Sorry, but I'm just too tired to surf for them tonight.
posted on February 5, 2004 11:34:28 PM
Bit defenders is a awesome free on-line scan ....this baby scan everything.It has found virus that McAfee and PC-cillin miss.It found a virus in a zipped folder that had been on my computer for 4 months that the other virus stoppers over looked a million times.
http://www.bitdefender.com/scan/licence.php
edited to add this tool will remove like 38 different virus for you ....easy easy easy to use http://vil.nai.com/vil/stinger/ includes the new mydoom now also
[ edited by toasted36 on Feb 5, 2004 11:38 PM ]
posted on February 5, 2004 11:53:53 PM
Libra...ltray is correct. Your email address is being spoofed by someone else's computer. If housecall found your computer clean, then you're o.k. I once had a seller send me an irate email accusing me of sending him a virus.It was actually sent by one of my customer's infected computer that had my email addy in their address book. The guy was so mad, he reported me to Ebay. I never heard from them, but I sent him an email explaining what happened. I never heard back from him either.
The light at the end of the tunnel will turn out to be an oncoming train.
posted on February 6, 2004 12:27:56 AM
Interesting topic, as just today I began getting delivery failure messages, too. Imagine my suprise when it was my .mailstep email address!
posted on February 6, 2004 12:40:52 AM
Libra: As long as you have an up to date AntiVirus, you should not have any problems. I have Norton Security System & have had no problems so far. I recommend thatr everyone should have at least an A/V & a firewall in place.
posted on February 6, 2004 04:42:02 AM
I have a twist on the spoof email address. I am on a Mac so I can't get mydoom or the other Windows baddies. I get about 100 failure notices a day from addresses I never heard of but only a small number have my actual email address. They are addressed to my personal domain with a wide range of non existent first names. John, Sue, Mary, Samantha etc. It looks to me as if someone is using a program to generate addresses on any domain name or that a spammer who generates random addresses in the hope of finding a live address has the worm. That would be ironic.
I am also getting "You sent a virus to our server." mails with a stern admonition to clean up my system and never do it again. Some of them now say "If your address was not spoofed..."
Don't want to start any Mac vs Windows threads but at times like this I am I really glad it have a Mac. -----o----o----o----o----o----o----o----o
“The illiterate of the future will be the person ignorant of the use of the camera as well as of the pen.”
Maholy-Nagy, Vision in Motion, 1947
posted on February 6, 2004 05:31:08 AM
I almost posted the same thing over here the other day but then I figured it wasn't ebay related so I didnt...........(just kidding)
I have Outlook. And a couple of weeks ago my husband's email address got on some junk spam list somehow and I got 20 30 emails a day with V.I.A.G.R.A. and P.ENIS and stuff like that. No matter how many rules for spam mail I put in my Outlook, I'd still get the darned things. They would come up with a new variation of spelling or the rules just simply didn't work. I was about ready to dump his email address.
So I went in search on Google of an Outlook spam something that I could use and ended up downloading SPAMfighter. I'm sure there are others that are out there that are just as good if not better but this one seemed simple enough to use.
The emails started slowing up immediately and have trickled down to where I've only gotten one in the last day or two. The emails go to a spam folder so you can look and make sure nothing is being deleted that you want.
I would recommend going to CNET and see what they recommend, they usually have tried and true tested downloads. I saw one that was highly recommended by them after I downloaded SPAMfighter. SPAMfighter has been working ok for me so I'll keep it a little longer since it was free - however, if somebody DOES know of a better program, I think we'd all like to know what it is.
posted on February 6, 2004 05:47:26 AM
Libra I would definitely recommend a firewall too. I just read an article the other day by someone who thought because they had a router they didnt need a firewall, but decided to try one anyway. And they said they were glad they did because within hours they received message alerts of various trojens trying to access their machines.
I always get alerts, especially on this board so you have to wonder if a firewall wasnt blocking them, then what?
posted on February 6, 2004 05:53:15 AM
also make sure you keep your Windows updated. they've come out with several updates since the virus thing started a couple of weeks ago.
