Andrew
Tue Aug 26, 2003 12:14 am
Not sure but I got an email from you today with that sobig virus, I know you didn't send it on purpose so I'm assuming you got the virus. Just a heads up.
Tue Aug 26, 2003 10:33 am
Which address did it come from?
EDIT: I've checked, and I don't have a virus.
EDIT: I've checked, and I don't have a virus.
Tue Aug 26, 2003 12:41 pm
Hmmm...that's just a forwarding address to a webmail account. I've checked a couple of times, and I certainly don't have a virus.
Tue Aug 26, 2003 12:49 pm
I know it's weird, my yahoo email is getting bombared with 10-12 virused emails per day, most of them from people i've never even heard of and corporations.
Tue Aug 26, 2003 12:56 pm
I know what you mean. I'm currently using all 12 filters in my Mail.com account to get rid of virus emails and spam. But I can assure everyone that my anti-virus software is up to date and hasn't detected any viruses. Most webmail providers also have some form of virus protection installed.
It's a shame people feel the need to create viruses and send spam.
It's a shame people feel the need to create viruses and send spam.
Wed Aug 27, 2003 11:25 am
I got two more virused emails from andrew@nba-live.com this only happens to my yahoo account grr
Wed Aug 27, 2003 11:50 am
It's strange. andrew@NBA-Live.com is just a forwarding address - if the emails were coming from my account, they would be from a_begley@mail.com.
virus
Fri Aug 29, 2003 6:35 pm
some virses get the the e-mail addresses stored in the infected computer, and e-mails itself using the email addresses it got. so the one sendint the email is not andrew, but a computer that has ndrews email address stored in its address book. below i s a quotation from symantec
"W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends itself to all the email addresses it finds in the files that have the following extensions:
* .dbx
* .eml
* .hlp
* .htm
* .html
* .mht
* .wab
* .txt
The worm uses its own SMTP engine to propagate and attempts to create a copy of itself on accessible network shares, but fails due to bugs in the code.
Email routine details
The email message has the following characteristics:
From: Spoofed address (which means that the sender in the "From" field is most likely not the real sender). The worm may also use the address, admin@internet.com, as the sender.
NOTES:
o The spoofed addresses and the Send To addresses are both taken from the files found on the computer. Also, the worm may use the settings of the infected computer's settings to check for an SMTP server to contact.
o The choice of the internet.com domain appears to be arbitrary and does not have any connection to the actual domain or its parent company."
"W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends itself to all the email addresses it finds in the files that have the following extensions:
* .dbx
* .eml
* .hlp
* .htm
* .html
* .mht
* .wab
* .txt
The worm uses its own SMTP engine to propagate and attempts to create a copy of itself on accessible network shares, but fails due to bugs in the code.
Email routine details
The email message has the following characteristics:
From: Spoofed address (which means that the sender in the "From" field is most likely not the real sender). The worm may also use the address, admin@internet.com, as the sender.
NOTES:
o The spoofed addresses and the Send To addresses are both taken from the files found on the computer. Also, the worm may use the settings of the infected computer's settings to check for an SMTP server to contact.
o The choice of the internet.com domain appears to be arbitrary and does not have any connection to the actual domain or its parent company."
Sat Aug 30, 2003 5:25 pm
I'd say that's the case. Thanks for the info roychoco. 