W32.Novarg.A@mm Virus

[Egg Bramhill]

I got caught by the following virus this morning Tuesaday 27th Jan. It is an email replicating virus. If anyone rcvs. an email from me please delete it as it's not genuine but a virus carrier.
Egg

[Egg Bramhill]

I got caught by the following virus this morning Tuesaday 27th Jan. It is an email replicating virus. If anyone rcvs. an email from me please delete it as it's not genuine but a virus carrier.
Egg

[gwpriester]

My server had over 200 messages, about 99% of them in the 30K size.

Oh Joy! http://www.talkgraphics.com/images/smilies/mad.gif

Gary

Gary Priester

Moderator Person


<a href="http://www.gwpriester.com">
www.gwpriester.com </a>


<a href="http://www.xaraxone.com">
The Xara Xone </a>

[Sheff]

Use Mailwasher. I've seen an increase in these messages recently as well. Mailwasher flagged them as viruses before I even download them from my server.

Sheffield Abella
www.sheff.com

[gwpriester]

Earthlink.net, my ISP has SpamBlocker which is extremely effective. You have to enter your e-mail address book and trusted domain names and then anything not listed is blocked.

They have two folders: Suspect SPAM and Known SPAM. The known folder is known spammers and the folder is self cleaning. The suspect is 99% SPAM but some of the senders are people who are not on the list. So I still have to go through the suspect messages.

But all in all it works really well.

Gary

Gary Priester

Moderator Person


<a href="http://www.gwpriester.com">
www.gwpriester.com </a>


<a href="http://www.xaraxone.com">
The Xara Xone </a>

[RTK]

*sigh* This is absolutely insane! I have seen very little of this previously, but this one... *oy*

I have received over six hundred of these things since this morning! I'm very dense... http://www.talkgraphics.com/images/smilies/rolleyes.gif how the heck does this end up being sent to my domain? http://www.talkgraphics.com/images/smilies/confused.gif My catch all adress receives about 75% and my others, the remanining 25%.

Risto

risto@ristoklint.com

Visit my web site!

[Sheff]

If you can manually add email addresses to block to your domain, I would suggest doing so. My ISP lets me block email with filters that I create.

I also block anything that has 'Enlargement, Viagra, Xanax, etc.' in the body of the message.

Risto, you might also want to remove your email address from your signature.

Sheff
www.sheff.com

[GOC]

I have found POPFile to be a very effective means of separating out spam. Once you have set it up it needs little maintenance, only a check of the spam now and then, to see if any pearls have been included. I'm getting better than 99% accuracy.
Read all about it at http://popfile.sourceforge.net/

[stratocast]

I'm getting loads of infected e-mails to my catch all address also.
<BLOCKQUOTE class="ip-ubbcode-quote"><font size="-1">quote:</font><HR>I have received over six hundred of these things since this morning! I'm very dense... http://www.talkgraphics.com/images/smilies/rolleyes.gif how the heck does this end up being sent to my domain? http://www.talkgraphics.com/images/smilies/confused.gif My catch all adress receives about 75% and my others, the remanining 25%<HR></BLOCKQUOTE>
The worm propagates using Simple Mail Tansfer Protocol (SMTP) to send email. It obtains addresses from the Windows Address Book (WAB) on the infected computer referenced in the following registry key:
HKEY_LOCAL_MACHINESoftwareMicrosoftWABWAB4Wab File Name

It also searches for email addresses and domain names from files that are located in the Temporary Internet Files folder:

If it cannot connect to SMTP services on the resulting server addresses, it uses the local mail server.

-- Bob
http://www.aphroditesun.com

"It's a small world, but I wouldn't like to paint it"

[AntonyF]

Topic moved to the off-topic forum.

--------
I'd start a revolution, if I could get up in the morning.