Lm

Luke_Curtis

19/09/2003 11:20 AM

VIRUS WARNING - URGENT - IMPORTANT

I have just got in the region of 190 virus infected e-mails through,
most in the "Microsoft Security patch" variety - seems to me like they
have cullud the distubution list from either RADW or RADWM going by
the CC list

BE PREPARED.



--
e-mail to aoxr19[AT]dsl[DOT]pipex[DOT]com

*All e-mail to "reply to" adrress will*
*automatically be deleted*


This topic has 13 replies

DA

"David A McIntee"

in reply to Luke_Curtis on 19/09/2003 11:20 AM

19/09/2003 2:14 PM

They've been culling names from the star wars and trek lists as well


--
--
"By the way, don't try to kill me again; it makes me angry." (John Crichton)

Redemption 05 - Hanover International Hotel, Hinckley, February 25-27
http://www.smof.com/redemption

http://www.btinternet.com/~david.mcintee

Currently reading: Triplanetary [EE 'Doc' Smith]

ZT

ZC TGS

in reply to "David A McIntee" on 19/09/2003 2:14 PM

20/09/2003 2:27 AM

On Fri, 19 Sep 2003 15:17:31 -0700 (PDT), [email protected] (Nicholas
Fitzpatrick) wrote:

>Presumably the virus is doing it automatically ... the infected user
>is likely using the Outlook Newsreader, and the virus goes that way ...


Why anyone sill uses Outlook and Outlook Express willingly is beyond
me. Ok, they are easily available, but there are many other free email
and newsreader clients out there.

If you don't like viruses one of the best things you can do is to move
to other clients such as Pegasus and Agent.


.

NS

Nathan Skreslet

in reply to "David A McIntee" on 19/09/2003 2:14 PM

20/09/2003 11:40 AM

> If you don't like viruses one of the best things you can do is to move
> to other clients such as Pegasus and Agent.

Mozilla is a pretty good one too. I just switched to it over the summer
and I like it a lot.

nN

[email protected] (Nicholas Fitzpatrick)

in reply to "David A McIntee" on 19/09/2003 2:14 PM

19/09/2003 3:17 PM

In article <[email protected]>,
Daibhid Ceannaideach <[email protected]> wrote:
>>From: "David A McIntee" [email protected]
>>Date: 19/09/03 22:14 GMT Daylight Time
>>Message-id: <[email protected]>
>>
>>They've been culling names from the star wars and trek lists as well
>
>Also alt.fan.pratchett and rec.arts.comics.dcu.

Presumably the virus is doing it automatically ... the infected user
is likely using the Outlook Newsreader, and the virus goes that way ...

Nick

dD

[email protected] (Daibhid Ceannaideach)

in reply to "David A McIntee" on 19/09/2003 2:14 PM

19/09/2003 2:55 PM

>From: "David A McIntee" [email protected]
>Date: 19/09/03 22:14 GMT Daylight Time
>Message-id: <[email protected]>
>
>They've been culling names from the star wars and trek lists as well

Also alt.fan.pratchett and rec.arts.comics.dcu.

If, like me, nearly all of your real e-mail is plaintext, your best bet is to
block all mail with attatchments until it's over.
--
Dave
Now Official Absentee of EU Skiffeysoc for FOUR years
http://www.eusa.ed.ac.uk/societies/sesoc
"We have no listing for the Cult of Fish in Edinburgh."
The Number 118-118, asked for the number of the Court of Session.

JC

"J.J. Chambers"

in reply to Luke_Curtis on 19/09/2003 11:20 AM

20/09/2003 12:20 PM

I hate to say "I told you so..."

This is why I refuse to put my address on usenet.

Although I still haven't received a satisfactory explanation for why I've
been banned from the auto-approve list because of that. It doesn't make any
sense.

DB

"Dwayne Bunney"

in reply to Luke_Curtis on 19/09/2003 11:20 AM

20/09/2003 2:42 AM

Yep I picked up 370 overnight. They are 50kb approx in size so I have shut
down the check mail every 15 minutes function on outlook express.

Am using a program called Mail Washer www.mailwasher.net to check the server
before downloading to my pc if this helps anyone.


--

--
Stay Alive!!
Dwayne Bunney
www.bunneys.i8.com/tranquilrepose.html

'They must have been anti-radiation gloves....' - 1st Doctor - The Daleks,
Episode 2



"Luke_Curtis" <[email protected]> wrote in message
news:[email protected]
> I have just got in the region of 190 virus infected e-mails through,
> most in the "Microsoft Security patch" variety - seems to me like they
> have cullud the distubution list from either RADW or RADWM going by
> the CC list
>
> BE PREPARED.
>
>
>
> --
> e-mail to aoxr19[AT]dsl[DOT]pipex[DOT]com
>
> *All e-mail to "reply to" adrress will*
> *automatically be deleted*
>

NS

Nathan Skreslet

in reply to Luke_Curtis on 19/09/2003 11:20 AM

19/09/2003 3:38 PM

Luke_Curtis wrote:

> I have just got in the region of 190 virus infected e-mails through,
> most in the "Microsoft Security patch" variety - seems to me like they
> have cullud the distubution list from either RADW or RADWM going by
> the CC list
>
> BE PREPARED.

I know, I just got nearly 300 over the last day and half though my
campus mail. Thankfully my mail reader strips the virus out, but it's
taking up a lot of bandwidth. Does anybody know where it came from?

RD

R Dan Henry

in reply to Luke_Curtis on 19/09/2003 11:20 AM

19/09/2003 7:39 PM

On Fri, 19 Sep 2003 11:20:03 -0700 (PDT), in a fit of madness
Luke_Curtis <[email protected]> declared:

>I have just got in the region of 190 virus infected e-mails through,
>most in the "Microsoft Security patch" variety - seems to me like they
>have cullud the distubution list from either RADW or RADWM going by
>the CC list

We're not special. Everyone is getting them. If any idiot using
Microsoft email software and *not* using decent virus support has your
address anywhere (viruses are no longer restricting themselves to
scanning address books), you're going to get the viruses when they come
around (about every couple of weeks any more).

Honestly, the Virus of the Nucleus of the Swarm (or whichever of the
sixty or so variants of its title you prefer) was a sweet, cuddly guy
compared to these computer viruses.

--
R. Dan Henry
[email protected]
George Bush is my President, not my spokesman.

hM

[email protected] (Molly Schlemmer)

in reply to Luke_Curtis on 19/09/2003 11:20 AM

20/09/2003 10:04 AM

Luke_Curtis <[email protected]> wrote in message news:<[email protected]>...
> I have just got in the region of 190 virus infected e-mails through,
> most in the "Microsoft Security patch" variety - seems to me like they
> have cullud the distubution list from either RADW or RADWM going by
> the CC list
>
> BE PREPARED.

I guess I've been lucky. I've only gotten about 100 of the little
buggers. Luckily, it's only been affecting one of my email addresses
(the one listed here). But every time I check my email, I've been
sent over-quota.

Ah, the wonders of technology, eh?

Molly

Ng

"Nigel"

in reply to Luke_Curtis on 19/09/2003 11:20 AM

19/09/2003 12:15 PM

Luke_Curtis typed;

> I have just got in the region of 190 virus infected e-mails through,
> most in the "Microsoft Security patch" variety - seems to me like they
> have cullud the distubution list from either RADW or RADWM going by
> the CC list
>
> BE PREPARED.

190, is that all .. I've had 1500+ of the bastard things in the last six
hours! Taking me all my time deleting the things. Hope the little scroat who
started all this off today sleeps easy tonight!

--
Nige

jr

[email protected] (remove hormel to reply)

in reply to "Nigel" on 19/09/2003 12:15 PM

19/09/2003 12:46 PM

>Hope the little scroat who
>started all this off today sleeps easy tonight!

Sleeps easy tonight while driving?

;-)
o--c
___
/__ __ __ \ / _ __ __
/ |_ |_ |_ \ /\ / | | |_/ |_/|_
(_/ |_ | | \/ \/ |_| | \ | \ _|
---c
Building the foundations for a spookier tomorrow...

ZT

ZC TGS

in reply to Luke_Curtis on 19/09/2003 11:20 AM

20/09/2003 6:22 AM

On Fri, 19 Sep 2003 11:20:03 -0700 (PDT), Luke_Curtis
<[email protected]> wrote:

>I have just got in the region of 190 virus infected e-mails through,
>most in the "Microsoft Security patch" variety - seems to me like they
>have cullud the distubution list from either RADW or RADWM going by
>the CC list
>
>BE PREPARED.



I know this is off topic but hopefully it will help some of the Clara
users on this newsgroup with these viruses


I know a few people here use Clara as their ISP for emails, etc

If you do use Clara as an ISP for your email, etc then you do have
access to user configurable email filters at the POP3 level.


To use these filters visit:
http://customer.clara.net

and then click on: Configure my mail filters

and then log on with your Clara username and password


Half way down the text of the Filter screen you will see the line:
If you wish to edit your filter file manually, you can do so by
clicking here.

At this click on the 'here' and then paste the following into the
filter box:


To "Client" drop
To "Partner" drop
To "User" drop
To "Customer" drop
To "Receiver" drop
To "Commercial" drop
To "Consumer" drop
To "Client" drop
To "technet.msdn.net" drop
From "Microsoft" drop
From "Inet Message" drop
From "MS Corporation" drop
From "MS Internet" drop
From "Net Email" drop
From "Customer Assistance" drop
From "Internet System" drop
From "MS Net" drop
From "Internet Message Service" drop



One you have done that Save your changes and log off. This should now
filter out nearly all of the current virus emails which means they are
deleted the moment they arrive on the POP3 server so you don't have to
download them.



.


You’ve reached the end of replies