PDA

View Full Version : Stupid worm problem


View Full Version : Stupid worm problem


Azathoth
April 24th, 2004, 03:04 PM
I got a automated reply email recently that said my computer tried to send someone the Worm.SomeFool.Q worm (only one autoreply so far). I've done 3 different AV (Norton AV, AVG, EZ AV) scans to try and detect it and found nothing. Than I searched th norton AV database for info and again nothing, Than I did a google for the damn thing and came up with posts of server logs blocking it mainly but I did come across one AV that supposidly removes it (only one???). The name of the AV is ClamAV I D/L it but man this thing seems to be a pain to install (plus I believe its for Unix which means it will only run on linux right?I'm running Win). My question is this. Has anyone else had this crap and how do I remove it? Or is it a hoax ( I never get spam in this particular email adress. I mean never).
Another thing thats also been driving me crazy is I've been getting mad emails with netsky.q attachments but my ISP blocks it so I just get an autoemail from ISP with the user name and all the info about the email. Is there anyway to get outlook express to automatically delete these so I don't have to screw with manually deleting them?

zaphodiv
April 24th, 2004, 05:54 PM
I got a automated reply email recently that said my computer tried to send someone the Worm.SomeFool.Q worm

Did it really say your computer tried to send an infected attachment or did it just say that some computer somewhere tried to send it. It is possible to put anything as the From: address on an email, even someone elses email address.

Netsky and similar worms forge the from address using addresses they find on the infected computer. It is likly that the worm just found your email address on someone elses computer, in their receive email or temporary internet files.

I get these bounce emails to one of my addresses. They sometimes include the header of the original message, the infectious emails are not coming from the SMTP server I use for outgoing email or directly from my computer. I'm not stupid enough to use outlook or ever execute an email attachment so I'm not infected.

Azathoth
April 24th, 2004, 06:18 PM
alright thank you for explaining that to me. also I'm not dumb enough to execute attachments if I don't know whats in them prior to receiving the email (i.e. from friends I know are gonna send me something). But why don't u like outlook (besides it's microsuck)? Could u suggest a better client? perhaps something more secure.

aboi
April 24th, 2004, 08:16 PM
this is the reason why i use webbase email.

zaphodiv
April 24th, 2004, 08:43 PM
> But why don't u like outlook

Because it has a long history of security holes that let evil people and viruses seize control of your computer just by sending you an email without you even clicking on an attachement. Another
hole (http://slashdot.org/article.pl?sid=04/04/09/0546203&mode=flat&tid=113&tid=126&tid=128&tid=172&tid=95) was found two weeks ago, microsoft has known about it for five years and didn't bother to fix it.

Because clueless people send me html email.

Because it tells spammers which idiots read their spam by loading images from
the spammers webserver.

Because clueless people send me messages with the reply above the quoted message.

>Could u suggest a better client?
Pine, it dosn't do html and it's only for unix style operating systems.

shawners
April 24th, 2004, 10:19 PM
Hey do this!!! Open a webmail account, and put that address in your address folder.. IF you get a virus, it will send it out to the email address.. so if you ever get something from yourself that you know you would never send anyways.. YOu could know for a fact you have a virus sending it out to others.

Azathoth
April 25th, 2004, 10:35 PM
Thanks for the heads up zaphodiv on that bug but since I use windoze It looks like even if I switched clients I'm still prone to it due to it being an IE thing (effing microsoft). And I really like that idea shawners I think I'm gonna do that.

Thanks for all the help :)

On second thought I will change clients just to be on the safe side.

kiwibank
April 26th, 2004, 01:08 AM
try mozilla thunderbird....

http://mozilla.org/products/thunderbird/

_____________________________________________

on zeropaid, it pays to be "flame resistant". it`s a matter of survival.