Warning!

[mattsiegman]

ATTENTION

I have recently learned that someone is using my email account to send viruses. Please do not open ANY attachment sent by me unless you are expecting it or have a VERY up to date virus scanner which scans your email. NEVER open an attachment from me with a '.exe'

The emails I've seen sent by "me" have contained a message similar to this
------------------
Test =)
dslkahsdfgasdflgkj
------------------

There is a '.exe' file attached.

DO NOT OPEN IT.

I'm not sure what I can do about this, but I am investigating.

Thanks, have a nice day!

-- Matt Siegman
http://www.mattsiegman.com

[Still Shady]

I just got one...

NOT!


Thanks for the warning!

[Connie]

Matt,

Keep us updated in regard to whether or not you are able to do anything
about this. I suggest you take the e-mail link out of your signature and off
your web-site if you have it there. Only post a e-mail address that is coded
so the spam bots can't read it. That won't stop somebody from
sending e-mail
with faked headers that appear to be from your site but it they will have to
make up a from name. Because of the problem you might want to change your
e-mail address so it is not easy to guess. Use something beside
matt@

Good Luck

[jason]

There was a warning about this sent to our technical listserv at work this morning. Its name is W32/Bagle@MM and it works like sobig did last year--when the program is executed it harvests email addresses from the infected computer and then propagates by sending itself to those addresses. It also uses a random address that it finds on the system to use as the "From" address.

So, Matt, there's not really anything you can do about this. Someone who has your address in their computer got infected and you got to be the lucky one who's email got used on all the messages sent out.

The good news (if there is any good news when it comes to viruses) is that this one is programmed to shut itself down in a week.

Here's the details, from McAfee:

W32/Bagle@MM is a Medium Risk mass-mailing worm with a potentially dangerous remote access component. Similar to last summer's Sobig virus, W32/Bagle@MM arrives as an executable attachment inside an email (subject line: "Hi"). When run, the virus checks the system date—if January 28, 2004 or later, the virus simply exits and does not propagate. Otherwise, the virus emails itself to addresses it steals from the infected computer, spoofing the "from: field" with one of the harvested addresses.

Caution: An infected email can come from addresses you recognize and may contain the following information:

What to look for:


From: address may be forged
Subject: Hi
Body: Test =)
(random characters)
--
Test, yep.
Attachment: (random filename) 15,872 bytes

Up-to-date McAfee VirusScan users are protected from this threat.

Note: The virus does not mass-mail itself to addresses that contain @hotmail.com, @msn.com, @microsoft and @avp.

--Jason

[mattsiegman]

yeah, I found out it was a new virus yesterday (I suspected as much)

bummer

[clio]

Thank goodness I have a Mac

[JPC-Masood]

Another worm creating a havoc on the Internet today:

http://www.cnn.com/2004/TECH/interne...ead/index.html

[Still Shady]

I got more than 50 messages on one of my mail account :s

[DIS]

Check out the silly advice one of the support techs is offering regarding Antivirus programs scanning email

http://jaguarpc.com/forums/showthrea...6997#post66997