virus

wheel repair it · Post by **wheel repair it** » Tue Nov 23, 2004 1:27 pm

got the mail below from a forum member this morning,have scanned computer and found nothing,any ideas.

This member did leave me a PM last night,could that be something to do with it,have asked most people i know on the web but they not had any spam off me,have any of you lot.

thanks folks

Hiya,

I guess youâ€™re the Wheel repair it from the peugeot206cc website.

Just to let you know that you have a virus on your system, as it is spamming out emails to lodsa people! Looks like you have the W32.Beagle.AV@mm virus, I would run a scan on your system mate.

Thanks

Paul

(paulo on 206cc.com)

paul_y3k · Post by **paul_y3k** » Tue Nov 23, 2004 3:44 pm

nope none here.
but it might be worth checking to see if your virus registry is upto date ?

wheel repair it · Post by **wheel repair it** » Tue Nov 23, 2004 6:34 pm

Its up to date mate,checked that first of all.

who knows,was going to buy the wife a laptop for xmas,she can go jump now,ill tell her i need a new one instead,cool,i like this virus.

Derek · Post by **Derek** » Tue Nov 23, 2004 7:54 pm

u buy too many presents

Huu · Post by **Huu** » Wed Nov 24, 2004 9:26 am

i got a whole bunch originate from here www.gentry.me.uk seem to be a knock off of user page??

User NIGELGENTRY, check your computer please... you been sending "bad" attachment to me over and over.

Lyndon, might like to check this out from what i read above it seem to take ID from CC users here and send to CC users.

Nicck · Post by **Nicck** » Wed Nov 24, 2004 11:21 am

Lots of viruses spoof the from address, so although the email may at first appear to be from you if the person who recieves it looks at the full headers they'll probably see that it's come from elsewhere. So as long as your antivirus software is up to date and not finding anything it should be ok. Sorry no excuse not to buy that laptop

Now for the boring technical bit......

Email addresses to send the virus to are usually got from your address book and also the temporary internet files. So any web pages the infected user has viewed with email addresses on it e.g. this forum can be sent a copy of the virus.

To stop a forum such as this helping propogate viruses it only needs a small change to stop displaying the email addresses in full. I've done it on other forums I've set up - I'll send you the details of what needs to be changed Lyndon....

wheel repair it · Post by **wheel repair it** » Wed Nov 24, 2004 7:13 pm

So has far as i can tell then ive not got the lurgi.

Kool

thanks guys

slimgym · Post by **slimgym** » Thu Nov 25, 2004 2:01 am

So has far as i can tell then ive not got the lurgi.

I was getting some from a user on Easynet, copied the headers to them and they deactivated the users access until they have confirmation it's sorted. A friend is getting the same from a user on Tiscali, so far they are just full of automated replies

Depends on the ISP but the header gives away the ISP origin, though probably not the user.

DPH · Post by **DPH** » Sat Nov 27, 2004 1:44 am

I have a program called mailwasher that filters out spam and also detects possible viruses, although it isn't a replacement for a proper virus checker it does 'clean' the junk from my inbox.....a major downside for having the same email address for 10 years.

If anyone wants to know anything more about the program let me know.

slimgym · Post by **slimgym** » Sat Nov 27, 2004 1:11 pm

I have a program called mailwasher that filters out spam and also detects possible viruses
I used to use mailwasher to bounce spam back to the originator in the hope that they'd think I'd gone away and stop sending. But then it became apparent most spam doesn't have a valid return address or spoofs someone elses address, so using MW to bounce spam just adds to the unecessary email burden and helps nothing.

It's ok for checking your mailbox before firing up your mail programme to pull the stuff in, but most ISP's offer a webmail type eqiuvalent or you could use something like www.mail2web.com or www.pop3now.com to safely look at mail.

DPH · Post by **DPH** » Sat Nov 27, 2004 8:51 pm

I never bounce the mail back towards hte spammer, I use mailwasher to look at the headers and delete the junk without me having to download the full message. Also having the SpamBot checking for known spammers is the main purpose I use it for.

carl · Post by **carl** » Sun Nov 28, 2004 12:50 am

SpamAssassin is another excellent tool. My mail hosting provider uses SpamAssassin on the server side, so I never see the spam mails. I've configured the rules to my liking, and I divert the spam into a special spam mailbox that I check about once a week (to make sure there's nothing legit in there). Even then I only download the headers. Once it's tweaked appropriately it's very efficient.