SpeedRacer 1 #1 September 29, 2004 Any computer nerds out there? I have an email account on Yahoo. Recently I got an email with the return address of a friend of mine. The subject just said "Thank you" . It had an attachment. I clicked on it to scan, and got this notice from Yahoo, saying that it was infected with the Beagle-(something) virus, so I deleted the email & emptied the trash. My question is, how did this happen? Is my friend's computer infected? Or did the program that delivers the virus hack into my Yahoo Address book, and take the address from there and put it into the "From:" space? I'm just wondering from which end did the virus enter. Speed Racer -------------------------------------------------- Quote Share this post Link to post Share on other sites
AggieDave 6 #2 September 29, 2004 Your friend's computer is infected. Tell him he's an asshole for not scanning his computer. I fucking hate it when I get that shit from folks who don't scan atleast weekly. Its their fault this problem doesn't slow down.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
Frenchy68 0 #3 September 29, 2004 This virus does the following upon infection: 1/ Accesses your email address book 2/ Sends emails using your address to people in your address book 3/ Sends emails using addresses from your book to people Pretty wicked. Best way to avoid it? GET A MAC "For once you have tasted Absinthe you will walk the earth with your eyes turned towards the gutter, for there you have been and there you will long to return." Quote Share this post Link to post Share on other sites
AggieDave 6 #4 September 29, 2004 Quote GET A MAC Then its a mac, which is even worst. They get viruses as well, btw. Who ever told you they didn't is full of complete bullshit.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
SpeedRacer 1 #5 September 29, 2004 OK, so you're both saying that the problem is on my friend's end, not on my end? hmmm, so maybe I should warn everyone else who knows him to beware of his emails? Speed Racer -------------------------------------------------- Quote Share this post Link to post Share on other sites
indyz 1 #6 September 29, 2004 Quote hmmm, so maybe I should warn everyone else who knows him to beware of his emails? If they run a good, updated anti-virus package they'll be OK. If they don't, I have no sympathy. Quote Share this post Link to post Share on other sites
hookitt 1 #7 September 29, 2004 W32.Beagle.AR@mm That's probably the one. Quote Share this post Link to post Share on other sites
AggieDave 6 #8 September 29, 2004 You really need to scan your system as well, especially if you haven't in the past 5 days. Download new definitions and get at it! Yup, his end. Tell him he's an ass for not keeping his system clean and nearly infecting your system.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
Frenchy68 0 #9 September 29, 2004 Quote They get viruses as well, btw. Who ever told you they didn't is full of complete bullshit. Most Window designed viruses will not affect a MAC. There are Mac designed viruses indeed, but very few of them... "For once you have tasted Absinthe you will walk the earth with your eyes turned towards the gutter, for there you have been and there you will long to return." Quote Share this post Link to post Share on other sites
hookitt 1 #10 September 29, 2004 It's very likely the person who sent it, really isn't the person who sent it. These mailer viruses read address books and pick random addresses to place in the from field (from the symantec page I posted above) Quote 8> Uses its own SMTP engine to send email messages to any addresses that it found. The email may have the following characteristics: From: Quote Share this post Link to post Share on other sites
Frenchy68 0 #11 September 29, 2004 Quote Your friend's computer is infected. Tell him he's an asshole for not scanning his computer. It's definitely from someone who has your email address, but not necessarily from THE person that sent it. The virus can infect friend A's computer, and send you an email using one of the addresses in Friend A's address book as the sender. That way, you would blame Friend B, and it makes the virus harder to track down... "For once you have tasted Absinthe you will walk the earth with your eyes turned towards the gutter, for there you have been and there you will long to return." Quote Share this post Link to post Share on other sites
AggieDave 6 #12 September 29, 2004 Actually, that's not entirely true. If you're running certain MS products, "windows" viruses can effect them (if written for the program in the first place). If you have a dos/windows partition on your HD for running emulators, etc, then it can definately effect you. Oh, and as for the number...well you would be VERY surprised.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
jkwon 0 #13 September 29, 2004 There are a bunch of attatchments that you shouldn't open. If they are certain kinds of files. Just leave them closed. Forget about them and toss them. most of the time they are .exe or .swf or .scr or plenty others. Just don't open them. I scan daily at 4am.--joe HISPA #69 The Best Band in the WORLD!!! The new full length album "See What You Can Find" Quote Share this post Link to post Share on other sites
AggieDave 6 #14 September 29, 2004 Sure it may have spoofed, but the person who's name is there is a good place to start. They may not have updated and scanned in a while and it might get them to, which is a good outcome.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
Zenister 0 #15 September 29, 2004 Quote It's very likely the person who sent it, really isn't the person who sent it. These mailer viruses read address books and pick random addresses to place in the from field (from the symantec page I posted above) Quote 8> Uses its own SMTP engine to send email messages to any addresses that it found. The email may have the following characteristics: From: exactly... i've gotten a few 'returned' emails here from viruses that picked up my dz.com email address from somewhere, since i rarely use this address except for skydiving things, I know i'm not sending anything out.... if your computer is always on set your anti virus to scan DAILY, pick a time that your not likely to be using it and you'll never even notice unless it finds something....____________________________________ Those who fail to learn from the past are simply Doomed. Quote Share this post Link to post Share on other sites
christoofar 0 #16 September 29, 2004 Quote Quote GET A MAC Then its a mac, which is even worst. They get viruses as well, btw. Who ever told you they didn't is full of complete bullshit. In the early days I stayed on OS/2 and used PMMail/2 for mail and surfed dz.com on IBM WebExplorer (I know, I know)... JUST to avoid having to use Outlook Express. Ack! ____________________________________________________________ I'm RICK JAMES! Fo shizzle. Quote Share this post Link to post Share on other sites
wmw999 2,555 #17 September 29, 2004 I still use Netscape to avoid Outlook Express. It's like using a condom -- not perfect, but not bad for the investment and hassle factor, too Wendy W.There is nothing more dangerous than breaking a basic safety rule and getting away with it. It removes fear of the consequences and builds false confidence. (tbrown) Quote Share this post Link to post Share on other sites
SpeedRacer 1 #18 September 29, 2004 great. I read the first few posts, so I immediately went & emailed everyone to AVOID (my friend)'s emails if they contain attachments! so now you're telling me that it might be someone else among my circle of friends/family?? Speed Racer -------------------------------------------------- Quote Share this post Link to post Share on other sites
Zenister 0 #19 September 29, 2004 it could possibly be any business/website/person etc you've ever used your email with...... there are a very limited number of places i use my dz.com address for, nearly all skydive related....but some how, some where, someone found it and used it as a spoof for sending a virus...____________________________________ Those who fail to learn from the past are simply Doomed. Quote Share this post Link to post Share on other sites
Nightingale 0 #20 September 30, 2004 it isn't always the person listed as sender, tho. I scan my computer weekly, but a friend's computer got infected. She had me in her addy book, and the virus used me as sender, and emailed her other friends. The virus wasn't even on my system, but I got a lot of angry emails. Quote Share this post Link to post Share on other sites
skymama 37 #21 September 30, 2004 Quote Tell him he's an asshole for not scanning his computer. That's not really fair. A lot of people really don't know what they need to do for upkeep even if they've been using computers for awhile. My mom is a perfect example. She does what she has been taught to do for her work, but she has no interest in learning the hows and why of computers because she can't stand using them in the first place.She is Da Man, and you better not mess with Da Man, because she will lay some keepdown on you faster than, well, really fast. ~Billvon Quote Share this post Link to post Share on other sites
PhreeZone 20 #22 September 30, 2004 The infected system is one that has both your address and the other address. In chasing the Bagle viruses for over the last year I've only ran into 1 case were the infected user was actually the one in the from address. Thats in over 300 investigations. The program is set up with a randomizer htat has a higher value on other addresses and a lower value on the infected systems address. Post the headers and we can at least tell you which ISP the infected system is on. Usually knowing the ISP and that it can only be someone that has both addresses limits the pool of suspects quickly.Yesterday is history And tomorrow is a mystery Parachutemanuals.com Quote Share this post Link to post Share on other sites
AggieDave 6 #23 September 30, 2004 Personally, I think it is perfectly fair. If you're gonna own a computer there are a few basic things that need to be learned. Things such as how to scan for viruses. If someone is infected and sends me the virus e-mail, it puts me at risk. I look at it like this, someone has a contageous disease but insists on being around others because they "didn't know." The data on my computer is very important to me, and although I do regular backups, I'll still loose a bit if I get his between backup cycles.--"When I die, may I be surrounded by scattered chrome and burning gasoline." Quote Share this post Link to post Share on other sites
Zenister 0 #24 September 30, 2004 I agree basic virus scans should be computers 101... i keep most of my relations up to date, even the ones who cant set the clock on the VCR. it's not much different imo from keeping oil in your car. if you cant be bothered to do it yourself, hire someone who can.....____________________________________ Those who fail to learn from the past are simply Doomed. Quote Share this post Link to post Share on other sites
Morcyk 0 #25 September 30, 2004 Quote That's not really fair. A lot of people really don't know what they need to do for upkeep even if they've been using computers for awhile. If you ask me, I don't think you should be allowed on the Internet unless you have at least a basic idea of what computer security is all about. You wouldn't leave your front door of your house wide open all day, so why would you do it with your computer? Yet lots of people do and that's half the reason that these viruses/worms/trojans always seem to "come back from the dead". Quote Share this post Link to post Share on other sites
