Hi All
Seeing as things are a little quiet on the Fall front at the moment I'd
just like to may you aware of a virus that is causing plenty on problems
at the moment. If you do not feel comfortable taking the steps to rid
yourself of this virus, then seek help. I'm no expert but found it quite
simple to do.
The following info concerns the latest MyDoom virus and how it is
affecting us. I say "us" because I can't believe I'm the only one
getting these unsolicited emails that say "hi" or "test". As most folks
do, I just delete them without opening them. There is more to it than
that, and YOU could be infected. I received an email from a friend who
is very knowledgeable about these things and he describes what to do to
check if you are infected. I checked this out tonight and confirmed that
I was not infected. Many folks are and my email address being harvested
from other peoples email address books. Following the simple steps below
can ensure that you find and purge Mydoom if it is on your PC. You do
not need a virus scanner to run the program - in fact I'm not sure if
all virus scanners are picking this up. I also recommend downloading a
free Firewall from one of the vendors on the net. I never used one until
lately and have found it a real help with pesky intruders.
Here are the instructions that I got:-
"It is almost certainly the work of the mydoom virus and it's B variant
Even if you havent got it, somebody that has your email does most likely
does. If that is the case it could be spoofing emails from you, to
anybody and if the send-to address is non-existant you will get a
failure message (routed to you because you are the apparant sender, even
if you didnt send it. Also if the destination mailserver is running AV
tools it could likewise cause a bounce back.
To ensure you havent got it do this :
Search for a file called HOSTS (no extension)
the only entry you want in there is
127.0.0.1 localhost
any others either remove or put # sign before them,as virus will have
added them.
then visit http://www.datafellows.com/v-descs/mydoom_b.shtml
and read it and download and run the detection and removal tool
(it covers both variants) that way you will be clean
also make sure your firewall blocks port 3127"
-----
Apologies to those not interested, but I thought I'd just pass on this
useful info.
Cheers
--
Graydon