[Dshield] do I have a virus?

Mike mjcarter at ihug.co.nz
Sat Mar 6 12:49:24 GMT 2004


Cheryl,

"I'm thinking that
someone who has my email address in their contact list has the virus.  Does
that mean that the virus takes email addresses from contact list of the pc
it is on and uses it to send email to other addresses in the contact list?"

Yes

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
Behalf Of lmc
Sent: Saturday, March 06, 2004 12:14 PM
To: General DShield Discussion List
Subject: Re: [Dshield] do I have a virus?


The only time I ever open attachments is if I'm expecting a specific file at
that specific time, and still I save it and scan it first.  I haven't opened
anything at all in the last few weeks.

My updated NAV scan came back clean.

I'm confused that the message was sent to the list that I'm on from MY email
address, yet it didn't come from my computer.  There are no copies of
anything in my sent box that I haven't knowingly sent.   I'm thinking that
someone who has my email address in their contact list has the virus.  Does
that mean that the virus takes email addresses from contact list of the pc
it is on and uses it to send email to other addresses in the contact list?

Thanks,
Cheryl


----- Original Message -----
From: "Bob Savage" <bsavage at rnr-inc.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Friday, March 05, 2004 4:40 AM
Subject: RE: [Dshield] do I have a virus?


> If you did not open the attached zip file and run the program inside it
you're OK.  This subject is used by emails carrying the Bagle.F and Bagle.G
viruses.
>
> I'd keep my anti-virus up-to-date on a daily basis.  I use TrendMicro at
home and I have it set to update automatically.  Lately it's updating at
least daily, sometimes more often.
>
> Bob Savage
> IT Manager
> RNR, Inc.
>
>
> -----Original Message-----
> From: lmc [mailto:lostmycensus at earthlink.net]
> Sent: Thursday, March 04, 2004 10:13 PM
> To: DShield
> Subject: [Dshield] do I have a virus?
>
>
> I'm on a number of mailing lists and tonight, one of the digests that I'm
on came with a message in it from my email addy that I did not send.  The
subject was:
>
>                          ello! =))
>
>  and the text in the message was:
>
>                    The access is  open  !!!
>
>                    password for archive: 56853
>
> Are these symptoms of a known virus or has someone maybe spoofed my email
address?  I use NIS, update virus protection almost every other day and use
the NIS firewall.  Am running a virus scan right now on my pc.
>
> Cheryl
>
>
>
>
>
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list


_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list