[Tigers] Trojan "Virus" Got Me...

Greg Tibbetts nospam at tibnet.org
Tue Jul 17 09:07:18 MDT 2012


Bill, et al;

Generally, they don't try to take all the contact addresses.  While they are
actively working on your machine harvesting addresses, there is a chance the
anti-virus software will detect "virus-like" activity, and report it to the
AV company or even terminate the trojan program.  It's more successful for
them to grab a bunch and go about sending them out.

My domains are signaling "hits" fairly frequently as malware attempts to
spoof them, then throw out a bunch of random emails using my domain names,
but completely unknown email addresses and unknown, to me, recipients.  The
emails are almost always not coming out of my servers or workstations or
using my contact lists, so there is literally nothing my anti-virus S/W can
do about it except flag the spoof attempt.

My personal opinion is that the number of a$$holes doing this stuff is now
so large and so distributed across the planet that we will have this
activity going on pretty much from now on.  No matter how many of these
jerks that the volunteers at Shadowserver and other such organizations shut
down, 10 jump in to take their place, and meanwhile the original guy creates
a new domain, often using one of the international top-level domain
registrars, like .ru which is popular at the moment.

All you can really do is let your anti-virus/anti-spam tools weed out as
much of the bogus stuff as they can, run scans often and keep your email
rules up to date to send unsolicited emails, mails with "Canadian
Prescriptions", or "Viagr" and such into your spam folder or automatically
delete them.  Unfortunately, it's just part of the cost of using the
internet which has become so valuable to all of us.  Take a moment and log
into Shadowserver.org to see what they are doing behind the scenes.  Note:
The Shadowserver address is not a selectable link as I do not put links in
my emails for safety's sake.  You can, however, enter it into your browser
or copy it and paste it into your browser.

Not a soapbox, just my 2 cents...

	Greg Tibbetts
	San Diego, CA

-----Original Message-----
From: tigers-bounces at autox.team.net [mailto:tigers-bounces at autox.team.net]
On Behalf Of Bill Waite
Sent: Saturday, July 14, 2012 6:54 PM
To: genepadgett at comcast.net
Cc: tigers at autox.team.net
Subject: Re: [Tigers] Trojan "Virus" Got Me... My Apologies

Tiger Listers...

The fellow who sent me the email (in haste, as it ends up) sent me a
follow-up message and said he was sorry for his original note.  I  think
most of us have hit that "send" button a bit too fast once or  twice!  In
any event... this was the first time my anti-virus failed me in this way,
and the bug apparently picked up some (but not all) of my "email contact
list" and got some Tiger List addresses, too.  Link was to some sort of
"work at home" scam or whatever.

Bill
To: Bill Waite <fordlandia at sbcglobal.net>
Cc: tigers at autox.team.net
Sent: Sat, July 14, 2012 2:41:02 PM
Subject: Re: [Tigers] Trojan "Virus" Got Me... My Apologies


Bill, it is very decent of you to apologize.  And very disgusting of your
fellow MarkII owner to comment as he did.  Al least you now have now have a
clear read on his true character, on lack thereof. 


Gene

________________________________
From: "Bill Waite" <fordlandia at sbcglobal.net>
To: tigers at autox.team.net
Sent: Friday, July 13, 2012 5:09:49 PM
Subject: [Tigers] Trojan "Virus" Got Me... My Apologies

Tiger Listers....

Sorry for the spam emails you may have received from my email address.... my
anti-virus caught it (but a bit late, I'm afraid).  I know it is upsetting
to get spam like that... in fact, one of my fellow Mark II owners emailed me
and called me a "sh&t head" over the issue.  I obviously did not have any
control over what happened.  Nevertheless, my apologies!

Bill Waite
Grand Rapids, MI
_______________________________________________

tigers at autox.team.net

Donate: http://www.team.net/donate.html
Archive: http://www.team.net/archive
Forums: http://www.team.net/forums
Unsubscribe: 
http://autox.team.net/mailman/options/tigers/genepadgett@comcast.net


More information about the Tigers mailing list