I got a couple of these yesterday, too. The first Bellsouth customer service person I talked to seemed not to know what I was talking about (a not-infrequent occurence with them) and shunted me off to their spam-control section. The second operator actually asked me what operating system I was running and had read the virus updates from Symantec, so just advised me to trash the message without opening the attachment--basic computer hygiene. I read the source of the message, but the writer had covered his/her tracks to the extent that everything seemed to be coming from a bellsouth.net address. I also ran Virex and everything's cool. Joyce On Tuesday, July 27, 2004, at 08:51 AM, Henri Yandell wrote:
> > Ah, _that_ title :) > > Yep, been getting a lot of them. Made more interesting as someone else > has > a bit of spam with much the same style that pretends to be a link to > aye.net/juno.com etc but instead goes off to whatever horrible site > they've hidden under the link. > > Looks like it's this 'W32.Mydoom.M at mm': > > http://securityresponse.symantec.com/avcenter/venc/data/ > w32.mydoom.m at mm.html > > After it infects your machine, it then proceeds to use google/yahoo and > other search engines to find out other email addresses on domain names > in > your address book, which apparantly caused some problems for the search > engines yesterday. > > It's rated as a High threat and (*trumpet play*): > > Systems Not Affected: DOS, Linux, Macintosh, Novell Netware, OS/2, > UNIX > > :) > > Hen > > On Tue, 27 Jul 2004, Jeff @ SLYN Systems wrote: > >> Anne, >> I received the EXACT same message with the word "juno.com" inserted >> where >> you wrote "aye.net". >> The attachment on the one to me was most certainly a virus. No >> question. >> It came with the subject line "Mail System Error - Returned Mail". >> Regards, >> >> Jeff Slyn, Owner >> SLYN Systems & Peripherals >> (502) 426-5469 >> serving Kentuckiana clients 7 days a week since 1985! >> >> >> On Mon, 26 Jul 2004 23:23:55 -0400 Anne Cartwright <cartwrig at aye.net> >> writes: >>> I received this message, supposedly from my ISP, how did this >>> (whatever >>> it is) happen? >>> >>> >>> Dear user of aye.net, administration of aye.net would like to inform >>> >>> you that: >>> >>> We have detected that your e-mail account was used to send a huge >>> amount of spam messages during the recent week. >>> Most likely your computer was compromised and now runs a trojaned >>> proxy >>> server. >>> >>> We recommend that you follow the instruction in order to keep your >>> computer safe. >>> >>> Best regards, >>> The aye.net support team. >>> >>> I wonder if this isn't a message from some poor soul with a virus in >>> >>> the attachment (instructions). What do you think? Of course I can >>> always call aye.net tomorrow . >>> >>> Anne Cartwright > > > > > | The next meeting of the Louisville Computer Society will > | be July 27. The LCS Web page is <http://www.kymac.org>. > | List posting address: <mailto:macgroup at erdos.math.louisville.edu> > | List Web page: <http://erdos.math.louisville.edu/macgroup> > | The next meeting of the Louisville Computer Society will | be July 27. The LCS Web page is <http://www.kymac.org>. | List posting address: <mailto:macgroup at erdos.math.louisville.edu> | List Web page: <http://erdos.math.louisville.edu/macgroup>
