---------------------------------------------------------- RV9-List Digest Archive --- Total Messages Posted Thu 08/28/03: 3 ---------------------------------------------------------- Today's Message Index: ---------------------- 1. 01:14 AM - Off Subject. Please check for virus! (Ken Moak) 2. 10:15 AM - Re: Off Subject. Please check for virus! (Andy Karmy) 3. 09:17 PM - Re: Off Subject. Please check for virus! (John Piepers) ________________________________ Message 1 _____________________________________ Time: 01:14:05 AM PST US From: Ken Moak Subject: RV9-List: Off Subject. Please check for virus! --> RV9-List message posted by: Ken Moak Ok somebody on this list has the Sobig Virus. It is a mass mailer and makes it look like you are getting mail from someone you know. I have seen many regular list contributors names come up, including Matronics. I know it is the way the virus spoofs, all it needs is users email and it gets them from old emails. I also know some of them are indicated I sent them, I even got one that showed I sent it to me. I have no idea who it is or how many are infected, so I'm not pointing a finger. PLEASE get you antivirus files updated. For more information go to any of the anti-virus companies such as Norton www.norton.com. The name of the virus is W32.Sobig.F@mm the virus sends several different versions. For what it is worth, I'm a professor of computer science I see this stuff all the time. People never think they are the one that is doing it. A quick check is all it will take. I went off line and checked all 5 of my home systems and switched to a Linux system so I could verify I was not sending it though one of my systems in case I forgot to patch or keep the virus files uptodate myself. I will check systems I use at the college tomorrow. Please check your system. I'm sure this is overfilling other users email. I think I'm getting about 50 and hour. Ken DO NOT ARCHIVE __________________________________ http://sitebuilder.yahoo.com ________________________________ Message 2 _____________________________________ Time: 10:15:58 AM PST US From: "Andy Karmy" Subject: Re: RV9-List: Off Subject. Please check for virus! --> RV9-List message posted by: "Andy Karmy" I was getting the same 50 per hour until I simply put a rule on my email server to drop all messages with .pif and .scr in them. Now my box is empty once again! - Andy DO NOT ARCHIVE ---------- Original Message ---------------------------------- From: Ken Moak >--> RV9-List message posted by: Ken Moak > >Ok somebody on this list has the Sobig Virus. It is a >mass mailer and makes it look like you are getting >mail from someone you know. I have seen many regular >list contributors names come up, including Matronics. >I know it is the way the virus spoofs, all it needs is >users email and it gets them from old emails. I also >know some of them are indicated I sent them, I even >got one that showed I sent it to me. I have no idea >who it is or how many are infected, so I'm not >pointing a finger. PLEASE get you antivirus files >updated. For more information go to any of the >anti-virus companies such as Norton www.norton.com. >The name of the virus is W32.Sobig.F@mm the virus >sends several different versions. > >For what it is worth, I'm a professor of computer >science I see this stuff all the time. People never >think they are the one that is doing it. A quick >check is all it will take. I went off line and checked >all 5 of my home systems and switched to a Linux >system so I could verify I was not sending it though >one of my systems in case I forgot to patch or keep >the virus files uptodate myself. I will check systems >I use at the college tomorrow. Please check your >system. I'm sure this is overfilling other users >email. I think I'm getting about 50 and hour. > >Ken > >DO NOT ARCHIVE > >__________________________________ >http://sitebuilder.yahoo.com > > ________________________________ Message 3 _____________________________________ Time: 09:17:07 PM PST US From: John Piepers Subject: RE: RV9-List: Off Subject. Please check for virus! --> RV9-List message posted by: John Piepers Messages with .zip files included are also know to carry virus. The last one sobig.f did that. Also messages with executables like .exe .com .bat .cmd .vbs etc are suspect; in some cases even .jpg attachments. I have our firewall at my company configured to drop all attachments with these extensions. -- John RV-7A builder DO NOT ARCHIVE -----Oorspronkelijk bericht----- Van: Andy Karmy [mailto:andy@karmy.com] Verzonden: donderdag 28 augustus 2003 19:25 Aan: rv9-list@matronics.com Onderwerp: Re: RV9-List: Off Subject. Please check for virus! --> RV9-List message posted by: "Andy Karmy" I was getting the same 50 per hour until I simply put a rule on my email server to drop all messages with .pif and .scr in them. Now my box is empty once again! - Andy DO NOT ARCHIVE ---------- Original Message ---------------------------------- From: Ken Moak >--> RV9-List message posted by: Ken Moak > >Ok somebody on this list has the Sobig Virus. It is a >mass mailer and makes it look like you are getting >mail from someone you know. I have seen many regular >list contributors names come up, including Matronics. >I know it is the way the virus spoofs, all it needs is >users email and it gets them from old emails. I also >know some of them are indicated I sent them, I even >got one that showed I sent it to me. I have no idea >who it is or how many are infected, so I'm not >pointing a finger. PLEASE get you antivirus files >updated. For more information go to any of the >anti-virus companies such as Norton www.norton.com. >The name of the virus is W32.Sobig.F@mm the virus >sends several different versions. > >For what it is worth, I'm a professor of computer >science I see this stuff all the time. People never >think they are the one that is doing it. A quick >check is all it will take. I went off line and checked >all 5 of my home systems and switched to a Linux >system so I could verify I was not sending it though >one of my systems in case I forgot to patch or keep >the virus files uptodate myself. I will check systems >I use at the college tomorrow. Please check your >system. I'm sure this is overfilling other users >email. I think I'm getting about 50 and hour. > >Ken > >DO NOT ARCHIVE > >__________________________________ >http://sitebuilder.yahoo.com > > advertising on the Matronics Forums. Share: Share photos & files with other List members.