Ot: Virus Warning: W32/Mydoom

I keep getting virus mails to my BVE related email addresses.
Be warned about this new tricky virus/worm. Update your antivirus software. Don't open email attachments if you are not 100 percent sure that they are not a virus. W32/Mydoom looks like this: "The message contains Unicode characters and has been sent as a binary attachment." DON'T OPEN THE ATTACHMENT.Information about W32/Mydoom:
http://vil.nai.com/vil/content/v_100983.htm

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

RE: OT: VIRUS WARNING: W32/Mydoom, damcox, Jan-27-04, 10:51 AM, (1) RE: OT: VIRUS WARNING: W32/Mydoom, Central trains, Jan-27-04, 11:41 AM, (2) RE: OT: VIRUS WARNING: W32/Mydoom, Scouser, Jan-27-04, 02:56 PM, (3) RE: OT: VIRUS WARNING: W32/Mydoom, J_Legrand, Jan-27-04, 02:59 PM, (4) RE: OT: VIRUS WARNING: W32/Mydoom, damcox, Jan-27-04, 03:16 PM, (5) RE: OT: VIRUS WARNING: W32/Mydoom, mailer_diablo, Jan-28-04, 09:02 AM, (6) RE: OT: VIRUS WARNING: W32/Mydoom, womer_uk, Jan-28-04, 05:23 PM, (7) RE: OT: VIRUS WARNING: W32/Mydoom, SachaD, Jan-28-04, 07:05 PM, (8) RE: OT: VIRUS WARNING: W32/Mydoom, womer_uk, Jan-28-04, 07:58 PM, (9) RE: OT: VIRUS WARNING: W32/Mydoom, Martin Finken, Jan-28-04, 08:27 PM, (10) RE: OT: VIRUS WARNING: W32/Mydoom, SteveGreen, Jan-29-04, 10:23 AM, (11) RE: OT: VIRUS WARNING: W32/Mydoom, TimHarvey, Jan-29-04, 10:59 AM, (12) RE: OT: VIRUS WARNING: W32/Mydoom, womer_uk, Jan-29-04, 02:48 PM, (13) RE: OT: VIRUS WARNING: W32/Mydoom, damcox, Jan-30-04, 10:54 AM, (14) RE: OT: VIRUS WARNING: W32/Mydoom, mailer_diablo, Jan-30-04, 11:01 AM, (15) RE: OT: VIRUS WARNING: W32/Mydoom, TomBeevers2000, Jan-30-04, 02:05 PM, (16) RE: OT: VIRUS WARNING: W32/Mydoom, womer_uk, Jan-30-04, 04:28 PM, (17) RE: OT: VIRUS WARNING: W32/Mydoom, Routemaster J, Jan-30-04, 04:54 PM, (18) RE: OT: VIRUS WARNING: W32/Mydoom, SteveGreen, Jan-30-04, 05:21 PM, (19) RE: OT: VIRUS WARNING: W32/Mydoom, TimHarvey, Feb-01-04, 07:46 AM, (20) RE: OT: VIRUS WARNING: W32/Mydoom, Wulf_9, Feb-02-04, 07:12 AM, (21)

Conferences | Topics | Previous Topic | Next Topic

http://www.the-siding.co.uk/bitsandbobs/virusinfo.htmDamon Cox

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

hi, got an email today from Mcafee i think warning me about this virus, Thanks Uwe for the update on a potential threat to everyone, http://www.sasva.com/central_trainsHome to the Derby to Tutbury and Hatton route for BVE. To find out more visit the link above

Site Updated

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi allTake care, myself and others have also recieved this email.DO NOT OPEN any attachments you are not completely 100% sure about.For the record mine was sent from <hotr@pl.net>.Thanks for the advance warning to the group I spotted it and deleted it.RegardsDerek

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Thanks for the info.. Already got over 50 emails with this virus ONLY for today.. Yawn..See You Later
Julian Legrand

- BVE france: http://bve.mm2france.net
- RSC NetWork: http://www.mm2france.net

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Jan-27-04 AT 03:18 PM (EST)

A word of warning,
Try not to write out your e-maill address out in full on the net, always use a NOSPAM type tag ( damon@NOSPAMvirtual-rail.co.uk - remove NOSPAM ) or just use a hyperlink such as E-Mail Me, using your E-Mail address as the link from a webpage.Damon Cox

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html

TOC Game - http://koti.mbnet.fi/rogorox/

Delivering Your Important Stuff! - Union-Atlantic Railroad

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi,Just to say if you've posted on the offical BVE (Japanese) board you will probably be sent the virus with the title, "Mail Delivery System". (I have had 2 sent today). The other common subject headings are...test
hi
hello
Mail Delivery System
Mail Transaction Failed
Server Report
Status
Error Be Warned !John

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

John,I haven't posted on the official BVE (Japanese) board, yet I've had that virus along with the 'Mydoom' virus one heck of a lot over the last couple of days, but thankfully my ISP has got a virus guard on emails so they detected the virus in the messages before they've managed to get to my inbox (Norton AV would of picked these up anyway), just a pain in the arse when I've received over 40 emails today, and only one wasn't a virus Sacha

SLUGS !!! He created slugs, they can't speak, they can't hear, they can't operate machinery. Are we not in the hands of a lunatic here? If I was the creator of the universe, I wouldn't fluff around with butterflies and daffodils, I'd start with lasers, 8 o'clock, day 1, POW !!!!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Jan-28-04 AT 08:00 PM (EST)

>I haven't posted on the official BVE (Japanese) board, yet
>I've had that virus along with the 'Mydoom' virus one heck
>of a lot over the last couple of days, Yeah Sacha,It is a pain, btw occording to the one of the BVE boards,the virus seems to originate from Australia, The Jap boards had this virus warning up at least 3 days before the ISP's took note in the UK!PS... I note that no Yahoo board will now accept any messages with what I previously posted above in the message line.John

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

If you have not protected your computer for 100% please search your system folder about the following file: shimgapi.dll.
Also you can search on the registery value about shimgapi
If you have found this file, please delete this emmediatly.
I hope. I can help you.
Up Today, 15 Virus Mail have arrived me, but I can blocked all.greatings
Martin Finken
http://BVE-Train.de

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Yesterday 35, today 40. out of those 3 were genuine e-mails, the rest virii.Sacha I was going to e-mail you to say thanks for the stuff, got it yesterday. Cheers
Steve
www.trainsimcentral.co.uk
www.bvetrains.co.uk

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Jan-29-04 AT 11:02 AM (EST)

Normally I get only a few viruses by e-mail, but I've had Mydoom 617 times in the past 4 days
I see it spreads by Kazaa also... http://us.mcafee.com/virusInfo/default.asp?id=mydoom

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Still getting them from japan,coming from @nsvmj3.zaq.ne.jp, with one of tagged, "mailer-daemon" tagged on the frontJohn

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi,
If it infects your computer, it will send itself to people in your contacts with your name as the author. Also can make it appear to be sent by someone in your contacts. This is how I got some other virus from Joshim Nur (Routemaster J)It also can come from 4 random letters '@Helgain.de' with an attachment named imggrfs.scr, a screensaver file.The latest version of {link:www.sophos.com|Sophos Anti-Virus] covers this. A new version of the checker is available every few weeks to months. Reccomended.Damon Cox

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

With now variants of MyDoom out there, it is better to delete any emails that has attachements. Preferrably any files that needs to be transmitted should be done via hosting webspace.

TOC Game - http://koti.mbnet.fi/rogorox/

Delivering Your Important Stuff! - Union-Atlantic Railroad

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Usual virus tips apply.I for one use web based email - means I can access it from any of the 4 computers I surf from usually, no waiting for downloading emails, and no attatchments are downloaded unless you tell it to .--
Tom Beevers
http://brj.rr.nu

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi,Heard on the news today Micro$oft are going to pay a massive reward for whoever reveals the name of the author, followed by a BIG law suit from their briefs.The news report also said the virus will cause a massive DNS attack on MS's servers this coming Sunday, (1 Feb)John

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

I have discovered some emails at uni with the mailer daemon thing from @cool.ne.jp! :O Thanks fully uni stops anything getting through, but if I haven't opened it how can it send it self using my address?

Joshim,
currently constructing the DLR Route for BVE & Oxford Street BUS ROUTE! Check out my website http://joshimsbveroutes.gamehorizons.net/

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

>I have discovered some emails at uni with the mailer daemon
>thing from @cool.ne.jp! :O Thanks fully uni stops anything
>getting through, but if I haven't opened it how can it send
>it self using my address? It doesn't. The virus Damon got probably wouldn't have come from you! More like it scanned through his address book and disguised the real senders address by picking yours.For folks who use OE, try Mailwasher, it will let you see what e-mail you have and delete any suspicious mails before using OE to download the genuine ones.It works as a great spam filter too.http://www.mailwasher.net/Cheers
Steve
www.trainsimcentral.co.uk
www.bvetrains.co.uk

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Possible it's using addresses found from the web also? I've had a few e-mails with this virus come from addresses with "nospam" in them, like people put on sites. eg xxx@NOSPAM.aol.com or xxx@NOSPAMyahoo.com

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-02-04 AT 07:13 AM (EST)

From what I can glean, this thing was written by a very pissed-off individual who has a beef with SCO Systems, who are apparently claiming that some code in the Linux OS are their property... as you can imagine, lots of Linux-ers are rather annoyed... last night on the news it said that SCO's website was taken offline following a DOS attack by computers infected with this thing... just be extra careful and delete ALL unknown attachments Saxon Locomotive Works - "The difficult we do immediately; the impossible takes a little longer"http://www.zodiac-infosystems.co.uk/rail/bve

Alert | IP

[ Home | MSTS Forum | MSTS FAQ | File Library ] Copyright © 2004 by Nels Anderson. All Rights Reserved.