Got a virus from [email protected]

[kex]

Hi,I just got a Netsky.B.Worm from [email protected]
Fortunately my virus scanner detected it and cleaned it.

So this thread is just FYI. Better check out if there isn't something wrong with your computer, steve.

Oh, by the way, the message text in the mail was:

"something is going wrong!"

So pay attention if you get similar mails, folks!

[JimC]

I feel confident that it did not come from Steve.

Many worms look through the e-mail address books on infected PC's, using addressesfound on the PC, as the "from" address on e-mails sent out with the virus (usually in the "background" from the infected PC).

So, any PC with [email protected] in an e-mail address book, could be the source.

This is a COMMON technique for a virus to use. That way, it will appear that someone you know sent you the e-mail, and you'll be more likely to open it.

[kex]

JimC wrote:

I feel confident that it did not come from Steve.

Many worms look through the e-mail address books on infected PC's, using addressesfound on the PC, as the "from" address on e-mails sent out with the virus (usually in the "background" from the infected PC).

So, any PC with [email protected] in an e-mail address book, could be the source.

This is a COMMON technique for a virus to use. That way, it will appear that someone you know sent you the e-mail, and you'll be more likely to open it.

Yah, right. I thought of that possibility, too.
But no way that I am going to open such emails. I love my NOD32, it does a good work!

[JimC]

IRT my last post, look at how the worm you received works. It spoofs the from e-mail addresses it uses -- see paragraph 2 here:

http://antivirus.about.com/cs/allabout/a/netskyb.htm


"The act of spoofing the From address can also cause perfectly innocent people to be accused of sending the worm. Ironically, the one person least likely to be infected is the person whose name appears in the From field.

[jackrussell]

kex, i'm always getting these type of virus attempts from all over the place. They usually have a silly phrase with them like yours said and from all different places. Luckily they have all been spotted by Norton which I keep updated every week.

[luisr]

JimC wrote:

"The act of spoofing the From address can also cause perfectly innocent people to be accused of sending the worm. Ironically, the one person least likely to be infected is the person whose name appears in the From field.

I get accused of sending infected e-mails every so often. Those dumb e-mail scanners are more annoying than the viruses themselves.

[Mikefellh]

luisr wrote:

JimC wrote: I get accused of sending infected e-mails every so often. Those dumb e-mail scanners are more annoying than the viruses themselves.

Ditto...the worst ones are from automated mailers like Amazon, you can't do anything but block them.

[eric s]

jackrussell

You really should set your virus checker to update every day. Once a week is not enough. That leaves you open to new viruses for (on average) 3 1/2 days. Personally, I want as little time between the virus definition update being issued and me getting it (so I actually update every time I boot the computer.)

Eric

[jackrussell]

eric, I check for updates every couple of days but they usually only release updates on Wednesdays. There are occasionally updates on other days which is why i check every other day. Thanks for the advice. :-)

[eric s]

Glad to help. I hate viruses, so I do what I can to help stop them.

Most anti-virus software can be set to check automatically. So my just checks automatically 5 minutes after I boot. Some times it gets in the way, but usually I don't notice and it works well.

Eric