Possible email virus alert!

[spepin]

I got a suspicious email yesterday. When I deleted the message above it in the list, and it appeared in the preview window (I didn't even have to open it -- all it had to do was display in the preview box), a dialog box flashed on my screen for just an instant, but I was able to see the word "Downloading" on it. I shut off my modem and started to inspect the message. In the raw message data, there was an executable filename listed (I don't recall what it was). I scanned for that file and it was not on my system, so I figured all was okay. I deleted the message to prevent any future accidental openings.

Whenever I reply to an email, the sender is automatically added to my address book. Today I received an email from a person at a business whom I had dealt with about 4 months ago. She wrote the typical "This is a business address. Please remove this address from your list" and the message that I had received yesterday was copied below. Apparently, whatever the original message contained copied my address book and is forging copies of itself.

I don't recall who the original message was from (nor would it matter since this thing forges itself), but the subject line read "Nice info to check :-)". The subject line is apparently chosen randomly from a list of subject keywords. The visible message body only reads "Peace :-)" or something very similar.

If you get an email with this or similar subject, do not even hilight it! Just by hilighting it, if your email client displays a preview of the message, the same will happen to you.

As I find out more info on this, I will pass it along.

Steve.

[spepin]

Here's an update:

The virus has been identified as W32.Aliz.Worm

More information, including a detailed description of possible subject lines can be found at:

http://securityresponse.symantec.com...aliz.worm.html

Steve.

[David C]

Steve,
Do you have IE? Is it set to display the contents of the current letter automatically in the lower panel when the header is highlighted in the list panel above?

If it is, turn off this feature, as it is automatically opening the subject file. I have to double-click to actually open the subject file. Since I see only the unopened listed header, I can simply delete anything that I do not recognize by author or subject. I have probably deleted a few good emails with the bad, but it is the safest first line of defense I know.

[lge]

David C

how do I turn off the feature?

[green giant]

We have IE,had an E-mail from one of my wife's friends and as I opened it Norton snatched it immediately. I just deleted it.
[img]graemlins/shrug.gif[/img]

In Edit: Steve,as I re-read your post you have on the bottom something about peace. The last name of our friends is Pease.Coincidence? [img]images/icons/shocked.gif[/img]

[David C]

Ige,

On the Outlook Express screen, take the View option from the menu bar.
Select Layout from the menu.
On the Layout windw, uncheck the Preview Pane box.

Now you will get only a listing of the email headers on the right side of the email screen. To actually open any mail item, double-click on its header.

[MGM]

David C, Thanks for the info. Been wondering for a long time why some emails open themselves. I have much to learn about these things. [img]images/icons/laugh.gif[/img]

Marv

[Powerstroke2000]

Thanks here too David! I've always wondered how to delete a message before you could highlight it, and having the ability to double click to get the message to come up is a safer method I believe.
I too have the Norton Anti-Virus 2002 program, and this week especially, I've had several e-mails that have had attachments which had virus's, and I'm so glad Norton is taking care of business in catching them and telling me prior to me opening them!

It's a shame that people have so much time on their hands, that they have to try to disrupt other's lives.

Thanks again...

Dale...

[H ED S]

Here is the one I posted the other day and it appears it stung Bob Riley [img]images/icons/smile.gif[/img] .

An update on it is that you dont have to openit for it to either corrupt your files or steel your information. It may turn out to be worse than the red and blue viruses that came out of Asia. this one came out of Germany.

I did what Dave suggested and hope that does it I also have the Norton 2002 with personal firewall.

I got a bad virus once and it was one BIG PITA. [img]images/icons/mad.gif[/img]

Good luck all

- Ed - [img]graemlins/warmimages/icons/smile.gif[/img] [img]graemlins/smokin.gif[/img]

[Jack Shaw]

There is a new virusscan program called Trend OfficeScan. We just upgraded to this from Norton Antivirus because our company relies heavily on E-mail Transactions. It catches all kinds of things that Norton Pro does not.

[H ED S]

Ohoops forgot to put the link in CRS ya know . [img]graemlins/shrug.gif[/img] [img]images/icons/laugh.gif[/img]

This worm is not from Asia like the red and blue ones were . It is from Germany and you do not hav to open it to get it and it can corupt your files and also steel your information [img]images/icons/frown.gif[/img] [img]images/icons/mad.gif[/img] .

http://www.msnbc.com/news/663187.asp?0na=x2101220V

- Ed - [img]graemlins/warmimages/icons/smile.gif[/img] [img]graemlins/smokin.gif[/img]