Do A Virus Check

Monpirri says on Mar 2, 2006, 15:55:

Eclipse Do you have a firewall installed? Do you have anti-spyware installed on your systems? Why do you suspect you have virus in your computer?
Download AVG anti-virus program and run it.

The life spam of a taste bud is ten days

0 funny, 0 helpful.

RUV says on Mar 2, 2006, 17:29:

What makes you think you got it from here? You most likely got it from somewhere else. Maybe that other Colombian website. The one we are not suppose to talk about.

0 funny, 0 helpful.

Eclipse says on Mar 2, 2006, 22:06:

W32.Beagle virus First of all, someone's email sends it to my yahoo account. From yahoo, the attachments contain the virus. This has been going on for almost 2 months now. I thought the person would find it, but it doesn't seem like it.

It is coming from someone related to this site or their contacts. I only go to this site and not any other Colombian website. The virus is the W32.Beagle at mm!zip. W32.Beagle at mm!zip is a detection for password-protected .zip files, which are sent as attachments in the W32.Beagle family of mass-mailing worms.

Because it's a mass-mailing virus and self generates emails, I don't know for sure who has the virus. The email address that I receive it from is gringo in colombia at earthlink dot net. I have never emailed to this email address. That is how I know I got it from someone from this site.

0 funny, 0 helpful.

kernow62 says on Mar 4, 2006, 11:54:

That is my E-mail. If you would study this Virus a bit closer it spoofs E-mails that reside in your system's cache. My E-mail is in your cache file, perhaps in a cached version of my webpage www.gringoincolombia.com

The best course is to clear your cache files and temp. Internet files, clear any pages you may have saved from my site. Run a scan, but if you didn't open the zip file you are safe.

The E-mail address that appears to be the one that sends this virus is not an infected machine, it is a spoofed address hence the name Trojan Horse.
http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle at mm!zip.html

0 funny, 0 helpful.

kernow62 says on Mar 4, 2006, 16:04:

Oh one other thing Eclipse, it is highly unusual for the virus to send itself out using the same E-mail address twice, almost unheard of ... unless it is being sent out by an individual spoofing my E-mail address. This virus propogates by spoofing a different E-mail each time so that simply blocking an E-mail does no good.

So...in that case simply use your SPAM filters to block my E-mail address, problem solved.

0 funny, 0 helpful.

Eclipse says on Mar 5, 2006, 02:22:

Please understand this....I KNOW WHAT THE VIRUS DOES! My system is clean. My system does automatic virus scans every Friday, plus, I have autoprotect on. I'm a system admin. I work with computers everyday. I know that it spoofs email addresses. What I said, but probably worded it wrong was that I don't know who has the virus, but I do know that whomever has it, has my email address and Kernow's email addy too. I've never been to your website Kernow, so I don't have your email address.... well, not until now. lol

The virus payload is large scale e-mailing: Large scale e-mailing
This type of payload involves sending emails to large numbers of people. This is usually done by accessing a local address book and sending emails to a certain number of people within that particular address book.

Now if I don't have Kernow's email addy, I would say it's pretty hard for my system to send me my own virus using Kernow's addy.
I already know what the virus does because I already went to Norton to find it. What I was trying to do was to let everyone on this site know that someone has a virus. So please, stop thinking that I have the virus and I don't know what I'm talking about.

Actually Kernow, it is not highly unusual for the virus to send itself out using the same E-mail address twice. In this case, i've been receiving infected emails from your email address for almost 2 months. It's not uncommon that a mass mailer does this. In fact, the company I work for kept receiving infected emails from someone for 6 months. Based on some investigation, we finally tracked the person/computer that was infected.

So I am trying to let everyone know that you MAY have a virus on your system. Blocking an email address or using your spam filter doesn't solve the problem. As I said before, please do a virus check.

0 funny, 0 helpful.

kernow62 says on Mar 5, 2006, 09:01:

Thanks for clarifying, Eclipse. So the simple solution would be for you and I to exchange a bit of info and perhaps we can track down the infected PC.

As you say not many people on PBH have your E-mail address your list sent to me would be the simplest solution. I assume more folks have my address from my site.

Shameless plug follows.
www.gringoincolombia.com

0 funny, 0 helpful.