1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Urgent! worm sends spam?

Discussion in 'Virus & Other Malware Removal' started by americamba, Feb 1, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. americamba

    americamba Thread Starter

    Joined:
    Nov 21, 2002
    Messages:
    654
    A poor lady keeps getting porno ads from ME. But I don't send them! I am Americamba. She is susan. she sends to me the following. Does anyone know what is happending and how to stop this? She gets:

    wOW CHECK THIS
    americamba
    ----- Original Message -----
    From: "loveshore" < [email protected] >
    To: < [email protected] >
    Sent: Fri,31 Jan 2003 20:37:03 PM
    Subject: how are you :)


    This e-mail is never sent unsolicited. If you need to unsubscribe,
    follow the instructions at the bottom of the message.
    ***********************************************************

    Enjoy this friendship Screen Saver and Check ur friends circle...

    Send this screensaver from www.passionup.com to everyone you
    consider a FRIEND, even if it means sending it back to the person
    who sent it to you. If it comes back to you, then you'll know you
    have a circle of friends.

    * To remove yourself from this mailing list, point your browser to:
    http://passionup.com/remove?freescreensaver
    * Enter your email address ([email protected]) in the field provided and click "Unsubscribe".

    OR...

    * Reply to this message with the word "REMOVE" in the subject line.

    This message was sent to address [email protected]
    X-PMG-Recipient: [email protected]
    <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>> <<<>>>

    Is there any connection with the message I get that I am sending out a virus? I have norton and run the updates and the complete c]scan and it finds nothing. All my outgoing and incoming are OK but somehow my address keeps sending out porn. Any ideas?
    .......................................
    Also,
    I get these following warnings while supposedly I am covered by Norton. I get:

    ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

    Place = DirectNet Application
    Sender = americamba
    Subject = An Ode to Blue, Green, etc.
    Delivery Time = January 30, 2003 (Thursday) 21:33:04

    Action on virus found:

    "WORM_YAHA.G" virus was found in attachment "An Ode to Blue, Green, etc..mp3.bat",
    ScanMail has deleted the attachment.

    Message from recipient's administrator:
    Warning to sender. ScanMail has detected a virus in an email you sent.

    I would reaaly appreciate your help.

    Thanks, Frank
     
  2. Byteman

    Byteman Gone but Never Forgotten

    Joined:
    Jan 24, 2002
    Messages:
    17,742
  3. Byteman

    Byteman Gone but Never Forgotten

    Joined:
    Jan 24, 2002
    Messages:
    17,742
  4. americamba

    americamba Thread Starter

    Joined:
    Nov 21, 2002
    Messages:
    654
    Thanks,

    I have good news OR bad news! I don't know which. Maybe the virus is gone. I ran the Symantec fix and also the trend micro and they both say no virus.

    It is good news if it is true and I probably fixed it with an online update and didn't realize it.

    It is bad news if something is still in there.

    I will be checking it.

    One lesson: Do the online update on daily!! This latest virus is only a few days old and I got it.

    Thanks, Frank
     
  5. Byteman

    Byteman Gone but Never Forgotten

    Joined:
    Jan 24, 2002
    Messages:
    17,742
    frank----You should have Susan check for the worm, using the specific tool, not just an antivirus scanner....its the first link I sent you, for a Yaha removal tool.
     
  6. americamba

    americamba Thread Starter

    Joined:
    Nov 21, 2002
    Messages:
    654
    Who is Susan?
    I did use the special removal tool. And it came up with "there is no Yaha j, k, l m in your computer" (or whatever the variants were.

    This may be the good news. Maybe the Norton update in the interval between writing to Techforum and my running the fix. Hope so. Thanks, Frank
     
  7. Byteman

    Byteman Gone but Never Forgotten

    Joined:
    Jan 24, 2002
    Messages:
    17,742
    Frank- Isn't this anyone you know? You mentioned the name susan in your first post.

    ______from your first post_________________________________________
    A poor lady keeps getting porno ads from ME. But I don't send them! I am Americamba. She is susan. she sends to me the following. Does anyone know what is happending and how to stop this? She gets:

    wOW CHECK THIS
    americamba
    ----- Original Message -----
    From: "loveshore" < [email protected] >
    To: < [email protected] >
    Sent: Fri,31 Jan 2003 20:37:03 PM
    Subject: how are you :)

    __________________________________________________
    I reliaze you ran the repair tools- I was thinking this may have been a person from your address book, that had possibly been infected with the Yaha worm....and to have you help them check for the worm on their system with the repair tool. If you are happy, I am happy. The emails should stop soon. This worm had to have come to you in email, so someone you know is probably still infected. Watch for emails with attachments by the names it lists (about a hundred or two) from the Symantec site I gave you to spot the bad attachments, Norton may or may not be configured to automatically trap them. From what I could see in your first post, it looks like it is....but your account was flagged for sending (not on purpose, the worm does this behind your back) attachments out. Keep the antivirus updated, then you should be in better shape. Yaha is slightly more than a few days old- the variant you had, may be a newer one, but all the sites I checked had this listed back several weeks ago.
     
  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/116527

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice