Reporting a virus attack sent to me via email.

G

Guest

FYI - I was sent an email message from this address;
(e-mail address removed). The subject line was :) with the paper
clip attachment sign. The body was about a password that I requested. Since
I didn't know who the person was, even though the last name was that of an
old friend, I decided to have Norton Anti-virus scan the message. Sure
enough, the virus scan detected the W32.Mydoom virus was in the attachment.
I did not open the attachment and deleted the file immediately.

I hope this helps you nab the culprit who is trying to send out this virus.

Thank you,
 
C

Colin Nash [MVP]

Mystigans said:
FYI - I was sent an email message from this address;
(e-mail address removed). The subject line was :) with the paper
clip attachment sign. The body was about a password that I requested.
Since
I didn't know who the person was, even though the last name was that of an
old friend, I decided to have Norton Anti-virus scan the message. Sure
enough, the virus scan detected the W32.Mydoom virus was in the
attachment.
I did not open the attachment and deleted the file immediately.

I hope this helps you nab the culprit who is trying to send out this
virus.

Thank you,

These are getting very common. The name and address in the "from" field is
not a reliable way of tracking down the sender. What happens, is the virus
has infected someone's machine, and that person has Daneille Difrancesco and
your email addresses stored somewhere on the computer (for example, their
email program's address book)-- the virus randomly picks some of these
addresses, sticks one of them in the "From" field and sends it to the other
addresses to spread itself.
 
L

Lanwench [MVP - Exchange]

In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam and
viruses. Never post valid email addresses in newsgroup posts.
 
C

Colin Nash [MVP]

"Lanwench [MVP - Exchange]"
In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam and
viruses. Never post valid email addresses in newsgroup posts.


They will now get 100 per day instead of 75 :(
 
G

Guest

I do not know this person and have no idea how they got my email address to
try to send me an email with a virus in it. How can you be so sure that this
person was not sending it out maliciously? If they are innocent, then I
apologize for it but if they are knowingly doing this, I hope their spam
keeps them tooo busy to try to infect someone else. :)

Since there is no way of reporting a possible virus threat source privately,
my only option was to post this here. I would rather have one person getting
a little bit more spam than hundreds of thousands going down from one source.


Sorry, I thought I was helping you to track down a virus source. Next time
I will just delete it and forget about it.

Colin Nash said:
"Lanwench [MVP - Exchange]"
In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam and
viruses. Never post valid email addresses in newsgroup posts.


They will now get 100 per day instead of 75 :(
 
K

Karl Levinson [x y] mvp

Trust us. We've dealt with thousands of these cases. That person is
innocent. There is no reason anyone nowadays would use their real email
address to try to infect you, or target just you with a virus because they
know you. The world just doesn't work that way. It's trivial to forge an
email address. Also, the Mydoom virus, like most any email virus nowadays,
is known to spoof the From: email address and send itself to people you
don't personally know. Viruses that only sent themselves to people known by
the person infected wouldn't get very far.

Do you know every address in all of your friends' email address book? No,
you don't. Even they don't know all of those addresses in their address
book, because some email clients automatically add new email addresses when
you reply, whether you know the person personally or not. You probably
don't know everyone in your email address book either.

If you don't trust us, trust Norton antivirus or any other anti-virus web
page:

http://www.sarc.com/avcenter/venc/data/[email protected]
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
"The From address is spoofed."

There's no need to report viruses. There's absolutely no point in doing so.
It just wastes your time. And don't post real email addresses here.


Mystigans said:
I do not know this person and have no idea how they got my email address to
try to send me an email with a virus in it. How can you be so sure that this
person was not sending it out maliciously? If they are innocent, then I
apologize for it but if they are knowingly doing this, I hope their spam
keeps them tooo busy to try to infect someone else. :)

Since there is no way of reporting a possible virus threat source privately,
my only option was to post this here. I would rather have one person getting
a little bit more spam than hundreds of thousands going down from one source.


Sorry, I thought I was helping you to track down a virus source. Next time
I will just delete it and forget about it.

Colin Nash said:
"Lanwench [MVP - Exchange]"
In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam and
viruses. Never post valid email addresses in newsgroup posts.


They will now get 100 per day instead of 75 :(
 
L

Lanwench [MVP - Exchange]

Mystigans said:
I do not know this person and have no idea how they got my email
address to try to send me an email with a virus in it. How can you
be so sure that this person was not sending it out maliciously?

Because that's the most likely cause. Google for

virus "spoofed sender" e-mail :)

If
they are innocent, then I apologize for it but if they are knowingly
doing this, I hope their spam keeps them tooo busy to try to infect
someone else. :)

Need to check facts first. Also, even if this person HAD sent you the
message, nobody here could do anything about it. Nor could an antivirus
vendor, the butcher, the baker, or the candlestick maker. Only the 'owner'
of an infected computer can prevent their own virus infection. You should
never post a valid email address in a newsgroup post.
Since there is no way of reporting a possible virus threat source
privately, my only option was to post this here. I would rather have
one person getting a little bit more spam than hundreds of thousands
going down from one source.

That isn't the answer either.
Sorry, I thought I was helping you to track down a virus source.
Next time I will just delete it and forget about it.

That's the best thing. Most mail borne viruses are not actually sent by the
address/person they look like they're sent from. An infected computer can
start sending out messages both TO and 'FROM' any address in the address
book on that PC, etc.
Colin Nash said:
"Lanwench [MVP - Exchange]"
In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam
and viruses. Never post valid email addresses in newsgroup posts.


They will now get 100 per day instead of 75 :(
 
G

Guest

I GET THE MESSAGE!!!!!!! HOW MANY MORE REPLIES AM I GOING TO GET TELLING ME
NOT TO POST AN EMAIL ADDRESS!!!!! I DID TRUST YOU AND THAT IS WHY I SENT THE
INFORMATION!!!! POINT IS I DID NOT KNOW THIS PERSON!!!! YES, I DO KNOW ALL
OF MY FRIENDS & FAMILY EMAIL ADDRESSES THAT ARE IN MY EMAIL ADDRESS BOOK. I
WILL NEVER, NEVER POST ANY MESSAGE ON THIS WEB SITE BECAUSE ALL YOU DO IS
REPRIMAND AND KEEP REPEATING THE SAME REPRIMAND.

I AM GOING TO UNSUBSCRIBE TO THIS SITE SO DON'T BOTHER WITH ANOTHER REPLY.
I DON'T NEED ANOTHER REPRIMAND!!!!!!

Lanwench said:
Mystigans said:
I do not know this person and have no idea how they got my email
address to try to send me an email with a virus in it. How can you
be so sure that this person was not sending it out maliciously?

Because that's the most likely cause. Google for

virus "spoofed sender" e-mail :)

If
they are innocent, then I apologize for it but if they are knowingly
doing this, I hope their spam keeps them tooo busy to try to infect
someone else. :)

Need to check facts first. Also, even if this person HAD sent you the
message, nobody here could do anything about it. Nor could an antivirus
vendor, the butcher, the baker, or the candlestick maker. Only the 'owner'
of an infected computer can prevent their own virus infection. You should
never post a valid email address in a newsgroup post.
Since there is no way of reporting a possible virus threat source
privately, my only option was to post this here. I would rather have
one person getting a little bit more spam than hundreds of thousands
going down from one source.

That isn't the answer either.
Sorry, I thought I was helping you to track down a virus source.
Next time I will just delete it and forget about it.

That's the best thing. Most mail borne viruses are not actually sent by the
address/person they look like they're sent from. An infected computer can
start sending out messages both TO and 'FROM' any address in the address
book on that PC, etc.
Colin Nash said:
"Lanwench [MVP - Exchange]"
message In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam
and viruses. Never post valid email addresses in newsgroup posts.



They will now get 100 per day instead of 75 :(
 
L

Lanwench [MVP - Exchange]

So I guess asking you not to type in all caps is going to be useless, then?
:)

Seriously, no offense was intended, and you were not being singled out for
any sort of abuse. You posted, we replied. You posted arguments against the
replies, you got more replies. None were unkind.
I GET THE MESSAGE!!!!!!! HOW MANY MORE REPLIES AM I GOING TO GET
TELLING ME NOT TO POST AN EMAIL ADDRESS!!!!! I DID TRUST YOU AND
THAT IS WHY I SENT THE INFORMATION!!!! POINT IS I DID NOT KNOW THIS
PERSON!!!! YES, I DO KNOW ALL OF MY FRIENDS & FAMILY EMAIL ADDRESSES
THAT ARE IN MY EMAIL ADDRESS BOOK. I WILL NEVER, NEVER POST ANY
MESSAGE ON THIS WEB SITE BECAUSE ALL YOU DO IS REPRIMAND AND KEEP
REPEATING THE SAME REPRIMAND.

I AM GOING TO UNSUBSCRIBE TO THIS SITE SO DON'T BOTHER WITH ANOTHER
REPLY.
I DON'T NEED ANOTHER REPRIMAND!!!!!!

Lanwench said:
Mystigans said:
I do not know this person and have no idea how they got my email
address to try to send me an email with a virus in it. How can you
be so sure that this person was not sending it out maliciously?

Because that's the most likely cause. Google for

virus "spoofed sender" e-mail :)

If
they are innocent, then I apologize for it but if they are knowingly
doing this, I hope their spam keeps them tooo busy to try to infect
someone else. :)

Need to check facts first. Also, even if this person HAD sent you the
message, nobody here could do anything about it. Nor could an
antivirus vendor, the butcher, the baker, or the candlestick maker.
Only the 'owner' of an infected computer can prevent their own virus
infection. You should never post a valid email address in a
newsgroup post.
Since there is no way of reporting a possible virus threat source
privately, my only option was to post this here. I would rather
have one person getting a little bit more spam than hundreds of
thousands going down from one source.

That isn't the answer either.
Sorry, I thought I was helping you to track down a virus source.
Next time I will just delete it and forget about it.

That's the best thing. Most mail borne viruses are not actually sent
by the address/person they look like they're sent from. An infected
computer can start sending out messages both TO and 'FROM' any
address in the address book on that PC, etc.
:


"Lanwench [MVP - Exchange]"
in message In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam
and viruses. Never post valid email addresses in newsgroup posts.



They will now get 100 per day instead of 75 :(
 
G

Guest

I asked you not to reply because I am tired of your reprimands. Just take a
look at the email below. You started with a sarcastic statement. What
can't you read all caps? How do I unsubscribe to this site.

Mystigans

Lanwench said:
So I guess asking you not to type in all caps is going to be useless, then?
:)

Seriously, no offense was intended, and you were not being singled out for
any sort of abuse. You posted, we replied. You posted arguments against the
replies, you got more replies. None were unkind.>
Mystigans said:
I GET THE MESSAGE!!!!!!! HOW MANY MORE REPLIES AM I GOING TO GET
TELLING ME NOT TO POST AN EMAIL ADDRESS!!!!! I DID TRUST YOU AND
THAT IS WHY I SENT THE INFORMATION!!!! POINT IS I DID NOT KNOW THIS
PERSON!!!! YES, I DO KNOW ALL OF MY FRIENDS & FAMILY EMAIL ADDRESSES
THAT ARE IN MY EMAIL ADDRESS BOOK. I WILL NEVER, NEVER POST ANY
MESSAGE ON THIS WEB SITE BECAUSE ALL YOU DO IS REPRIMAND AND KEEP
REPEATING THE SAME REPRIMAND.

I AM GOING TO UNSUBSCRIBE TO THIS SITE SO DON'T BOTHER WITH ANOTHER
REPLY.
I DON'T NEED ANOTHER REPRIMAND!!!!!!

Lanwench said:
Mystigans wrote:
I do not know this person and have no idea how they got my email
address to try to send me an email with a virus in it. How can you
be so sure that this person was not sending it out maliciously?

Because that's the most likely cause. Google for

virus "spoofed sender" e-mail :)


If
they are innocent, then I apologize for it but if they are knowingly
doing this, I hope their spam keeps them tooo busy to try to infect
someone else. :)

Need to check facts first. Also, even if this person HAD sent you the
message, nobody here could do anything about it. Nor could an
antivirus vendor, the butcher, the baker, or the candlestick maker.
Only the 'owner' of an infected computer can prevent their own virus
infection. You should never post a valid email address in a
newsgroup post.

Since there is no way of reporting a possible virus threat source
privately, my only option was to post this here. I would rather
have one person getting a little bit more spam than hundreds of
thousands going down from one source.

That isn't the answer either.


Sorry, I thought I was helping you to track down a virus source.
Next time I will just delete it and forget about it.

That's the best thing. Most mail borne viruses are not actually sent
by the address/person they look like they're sent from. An infected
computer can start sending out messages both TO and 'FROM' any
address in the address book on that PC, etc.

:


"Lanwench [MVP - Exchange]"
in message In addition to Colin's reply - by posting the very likely innocent
(non-sender's) email address, you've just signed them up for spam
and viruses. Never post valid email addresses in newsgroup posts.



They will now get 100 per day instead of 75 :(
 
L

Lanwench [MVP - Exchange]

What sarcastic statement? I was quite polite, and correct. When people type
in all caps, it's very hard to read, and it's considered to mean that the
poster is "shouting", in newsgroup etiquette, which many people will take to
be rude. I even included a smiley to indicate that this was gently meant.
Might want to check out the following links:

Help us to help you:
http://www.dts-l.org/goodpost.htm
http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
http://aumha.org/nntp.htm

I'm sorry if you took offense, but I don't think you have been badly
treated - you asked a question, you got many answers, and instruction.

Re unusbscribing: if you're posting via the Microsoft CDO/web interface, I
don't know how you do that. A lot of people prefer newsreader clients as one
can sub/unsub to groups more easily.

I hope you'll reconsider your decision, and learn to take things more
lightly in here - there is a lot of good information to be learned and
shared. Following the rules of posting will help you get what you need out
of it - everyone is new once, and a gentle reminder that there are better
ways to do things is not abusive or intended to be.
I asked you not to reply because I am tired of your reprimands. Just
take a look at the email below. You started with a sarcastic
statement. What can't you read all caps? How do I unsubscribe to
this site.

Mystigans

Lanwench said:
So I guess asking you not to type in all caps is going to be
useless, then? :)

Seriously, no offense was intended, and you were not being singled
out for any sort of abuse. You posted, we replied. You posted
arguments against the replies, you got more replies. None were
unkind.>
Mystigans said:
I GET THE MESSAGE!!!!!!! HOW MANY MORE REPLIES AM I GOING TO GET
TELLING ME NOT TO POST AN EMAIL ADDRESS!!!!! I DID TRUST YOU AND
THAT IS WHY I SENT THE INFORMATION!!!! POINT IS I DID NOT KNOW THIS
PERSON!!!! YES, I DO KNOW ALL OF MY FRIENDS & FAMILY EMAIL
ADDRESSES THAT ARE IN MY EMAIL ADDRESS BOOK. I WILL NEVER, NEVER
POST ANY MESSAGE ON THIS WEB SITE BECAUSE ALL YOU DO IS REPRIMAND
AND KEEP REPEATING THE SAME REPRIMAND.

I AM GOING TO UNSUBSCRIBE TO THIS SITE SO DON'T BOTHER WITH ANOTHER
REPLY.
I DON'T NEED ANOTHER REPRIMAND!!!!!!

:

Mystigans wrote:
I do not know this person and have no idea how they got my email
address to try to send me an email with a virus in it. How can
you be so sure that this person was not sending it out
maliciously?

Because that's the most likely cause. Google for

virus "spoofed sender" e-mail :)


If
they are innocent, then I apologize for it but if they are
knowingly doing this, I hope their spam keeps them tooo busy to
try to infect someone else. :)

Need to check facts first. Also, even if this person HAD sent you
the message, nobody here could do anything about it. Nor could an
antivirus vendor, the butcher, the baker, or the candlestick maker.
Only the 'owner' of an infected computer can prevent their own
virus infection. You should never post a valid email address in a
newsgroup post.

Since there is no way of reporting a possible virus threat source
privately, my only option was to post this here. I would rather
have one person getting a little bit more spam than hundreds of
thousands going down from one source.

That isn't the answer either.


Sorry, I thought I was helping you to track down a virus source.
Next time I will just delete it and forget about it.

That's the best thing. Most mail borne viruses are not actually
sent by the address/person they look like they're sent from. An
infected computer can start sending out messages both TO and
'FROM' any address in the address book on that PC, etc.

:


"Lanwench [MVP - Exchange]"
in message In addition to Colin's reply - by posting the very likely
innocent (non-sender's) email address, you've just signed them
up for spam and viruses. Never post valid email addresses in
newsgroup posts.



They will now get 100 per day instead of 75 :(
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top