Virus Warnings Thread.

[peter k]

My Yahoo account has just picked up a virus from YD Admin.
The title was "ourse . The virus was called w32Yaha.F@MM
Don't open the attachment up. This is where the bug is>

[Jay]

Thanks Peter - this is an automatic virus that picked up on our admin email and propogated itself through my address book. Many apologies for this - I have just re-run my virus checker and (hopefully) eraditicated it. Please let us know if this occurs again.

Regards

(Edited by Heads Up at 12:19 am on Dec. 26, 2002)

[Jay]

Been thinking a bit about this Peter - was the email from admin@yorkshire-divers.co.uk?

If so, then is address in your contact list?

My home PC is clean (tested the f**ker till 4am this morning!!) and the web server doesn't have an address book. The above email address is strictly used by the server so am wondering if the virus is on someone elses machine?

[Jay]

Right - definitely NOT on any of my home machines and although I have notified my hosting company, the chance is that the virus is on one of our members' home machines and is sending emails to all others in his contact list. Can you all please scan your machines to make sure you are not infected.

Synaptic have provided a scan and removal tool HERE

Alternatively, McAfee will do a free online system scan HERE

Regards

[Davey Willo]

My software caught this virus incoming to my PC twice yesterday, but it just deletes the e-mail so I don't know where it came from I'm afraid... done a full system scan and I'm not infected.. Thank God for Norton Internet Security 2003 :biggrin:

[Jay]

OK - not on the YD server either (its UNIX and is unaffected by the virus) so it looks like it is on one of the YD members' machines - specifically someone who has Peter K, Andy2tanx and Dave Williamson but NOT me in their Microsoft address book (I have not received the email). If this sounds like you then please disinfect as per links above.

Good news though is that it has nothing to do with YD!!

[Andy Winterburn]

On the other hand Jay, it could have been some-one from Divernet or any other newsgroup on which Peter has posted, using the address of YD to post out viruses.
Peter if you tried to send as a return what address is shown?

[Big Steph]

Peter, I had this virus as well.  I have contacted people I have e-mailed recently and some of them had a trojan virus.  All machines have been cleaned.  

Cheers

[Andy Phillips]

Hi,

I've got a feeling it is Divernet, and seems to use an attached pc to bounce through to someone who's post you are looking at. I seem to have sent it to a guy called budgy, but it came from an old e-mail address I now only use on Divernet.

My machine is brand new and clean, I scanned it anyway and it is clean.

Curious huh

[budgy]

I don't download e'mail attachments any more without first writing to the sender to check.