I never get such messages on my Linux box. What gives?

One of my web-based email addresses got absolutely filled to it's quota by these type of emails, the common factor was they all came with an attachment that was roughly 30-40kb big, mostly 32kb though.

I got sick of deleting them and decided to let them fill the mailbox up and that way any extra ones would be bounced back from where they came. I emptied it a couple of days after I did that and have only received the occaisional one since.

Still annoying though. Oh well.. such is the net.

Originally posted by TKR514

I never get such messages on my Linux box. What gives?

Haxors typically write viruses for windows products, mostly.

I received two emails Monday (3-1-04) that had the virus attachment. The funny thing was, they both had my ISP's name after the "@" sign. Unfortunately, my aunt had been sending scanned photos almost daily and I assumed that one of her emails was redirected and I opened it. It immediately loaded itself onto my hard drive (incessant hard drive hits). I was able to clean it all up right away and have had no further problems.

BTW, the files were ".pif" type files.

Oh.. THAT virus.. it eventually slows everything down to a crawl and takes up resources. It attaches itself to every executable you've opened since it's been on your HDD.

Did you remove the registry entry and source file that perpetuates it?

Hi Kyteler,

Yes, I used Trend Micro to flush it out, including the registry. I did this right after it installed itself on my HDD, before I did anything else.

Clean as a whistle!

Here's Trend Micro's site for anyone who needs it. Notice: The service is free, but it'll take about 1-1/2 hours to clean things up.

http://housecall.trendmicro.com/

Yeah I got two of those e-mails, but I had read the post this morning before checking my email.

Mike i keep getting emails sent to me saying RE: Your questions etc... or I await your response. Is this because someone hacked into the site stole our email address' and is using them to send us this virus.

I know that your doing your best to weed it out just a bit frustrated that I have this coming in daily. I usually keep my private email address for friends etc... and hotmail for other stuff that could contain this sort of thing.

Good luck with fixing the problem.

BTW my extensions are usually .pif

Hi Gavin,

I've pasted the information below from a university web site that should explain what is happening to you.

["The W32/MyDoom@MM Virus Fills Mailboxes; Forges Its "From:" Field

by Bruce P. Burrell (bpb@umich.edu)

for the U-M Virus Busters (virus.busters@umich.edu)

Last significant update: 26 January, 2004

This information can be freely reproduced in any medium, as long as the information is unmodified.

The MyDoom virus infects only PC computers running Windows; Macintosh users, and users of other non-Windows operating systems cannot be infected by this virus. These users may, however, receive plenty of email from MyDoom, so its "annoyance factor" is large.

MyDoom was discovered 26 January 2004; it forges its From: address and uses a random Subject: line. The infected attachment has a random name as well, though it often will be named doc.bat, document.zip, message.zip, readme.zip, text.pif, hello.cmd, body.scr, test.htm.pif, data.txt.exe, or file.scr. The size of the attachment is about 23 KB; the email itself (before de-MIMEing) is about 33 KB."]

The virus is in your computer. I posted a link earlier in this thread that will enable you to detect and clean out this virus. I had the exact same virus a week ago and know what you're going through. I've gotten emails from a relative claiming I sent them an email with this virus in it (they're anti-virus software picked it up). What they didn't realize is they already HAD the virus and it was getting and using my email address to cloke itself so it looked safe to open and propagate. I'm possitive my pc was clean on the 4th of March through the 7th when my relative brought this up, because I checked my system at that time and it came up clean.

Sorry to take up so much space here, but I believe a thorough explanation is in order for everyone's benefit.

Good luck with your cleanup.

:classic:

I have the latest version of vet running and it did pick it up. I just keep getting emails with the virus in it saying open me.

I have been ignoring them since day 1.

I will run a scan again soon but I don't think i have it actually on my PC.

I am trying to work out if it's still sending emails because I have the virus from what your saying to me it sounds that way but I'm almost 100% i don't have it as I wouldn't let it open.

I ran another scan and it didn't pick up the virus but i still get emails from nobodies with the attachment.

I ran another scan and it didn't pick up the virus but i still get emails from nobodies with the attachment.

If I understand correctly, you are getting the e-mails because you are in someone's address book that does have the virus...but it doesn't mean that you have it. I know I'm not explaining it very well

On another note, the other day, I received the email form the the Nigerian prince offering to share his $20,000,000 inheritence with me.