Virus alert
 

Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.
I received one myself today and was alerted about the virus by my
updated NAV/Symantec system. My PC is also protected by Demon/Turnpike
and MS-XP-Home software. Anyone receiving a copy of the spam should
delete it without opening. With apologies.
--
Alan Gould

"Alan Gould" wrote
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.
I received one myself today and was alerted about the virus by my
updated NAV/Symantec system. My PC is also protected by Demon/Turnpike
and MS-XP-Home software. Anyone receiving a copy of the spam should
delete it without opening. With apologies.
--

Surely everyone on the internet knows these modern virus's don't come from
who they say they do, the from address is spoofed.
http://securityresponse.symantec.com...ion=1152x864As examples.--RegardsBobIn Runnymede, 17 miles West of London

"Alan Gould" wrote in message
...
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.
I received one myself today and was alerted about the virus by my
updated NAV/Symantec system. My PC is also protected by Demon/Turnpike
and MS-XP-Home software. Anyone receiving a copy of the spam should
delete it without opening. With apologies.
--
Alan Gould

They seem to be using my name as well. I too am protected, so please delete any
suspicious messages from "me"

Jenny

"Martin" wrote in message
...
On Wed, 3 Nov 2004 12:06:51 +0100, "JennyC" wrote:


"Alan Gould" wrote in message
...
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.
I received one myself today and was alerted about the virus by my
updated NAV/Symantec system. My PC is also protected by Demon/Turnpike
and MS-XP-Home software. Anyone receiving a copy of the spam should
delete it without opening. With apologies.
--
Alan Gould

They seem to be using my name as well. I too am protected, so please delete
any
suspicious messages from "me"

I seen one from you.
Martin

tut tut, your English is going down the drain just as quick as mine :~)

Jenny

On 3/11/04 11:06, in article , "JennyC"
wrote:


"Alan Gould" wrote in message
...
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.
I received one myself today and was alerted about the virus by my
updated NAV/Symantec system. My PC is also protected by Demon/Turnpike
and MS-XP-Home software. Anyone receiving a copy of the spam should
delete it without opening. With apologies.
--
Alan Gould

They seem to be using my name as well. I too am protected, so please delete
any
suspicious messages from "me"

Jenny


I've received one ostensibly telling me that a msg. I'd sent couldn't be
delivered and bearing an attachment, too. As it's not only someone I'd never
email and as I've had a few of these before, it was deleted immediately.
But I have Norton running the whole time and do a virus update daily.
--

Sacha
(remove the weeds for email)

On 3/11/04 17:25, in article ,
"Janet Baraclough.." wrote:

The message
from "JennyC" contains these words:


"Alan Gould" wrote in message
...
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.

They seem to be using my name as well. I too am protected, so please
delete any
suspicious messages from "me"

Jenny

Can either of you say if the recipients' addresses were harvested from
your addressbooks, (or were definitely not in your addressbooks)?

Janet.


I know this isn't addressed to me but in my case, the so-called recipient
was definitely not in my address book. Whether I was in his I don't know.
--
Sacha
www.hillhousenursery.co.uk
South Devon
(remove the weeds to email me)

In article , Sacha
writes
On 3/11/04 17:25, in article ,
"Janet Baraclough.." wrote:

Can either of you say if the recipients' addresses were harvested from
your addressbooks, (or were definitely not in your addressbooks)?


I know this isn't addressed to me but in my case, the so-called recipient
was definitely not in my address book. Whether I was in his I don't know.

I've come across two types of email using my forged address

1) generation of spam/virus purporting to come from me, but actually
coming from someone else entirely

2) taking advantage of the prevalence of 1), emails pretending to have
intercepted a virus infected email from me, and asking me to click on a
link for further details/rid myself of the virus etc. I presume that
clicking on the link delivers the virus.

I ignore/delete all such messages.
--
Kay
"Do not insult the crocodile until you have crossed the river"

In article , Janet Baraclough.
.. writes

Can either of you say if the recipients' addresses were harvested from
your addressbooks, (or were definitely not in your addressbooks)?

Other than my own address, the recipients were not in the address book
of my present PC, but they were in a previous one. One was an urgler a
long time ago. I did not transfer the old address book, or any urg data
when this PC was built two years ago.
--
Alan Gould

Janet Baraclough.. wrote in
:

It can't be coincidence that the fake-urgler-ID
viruses are being received by other urglers.

Looks like a troll ID-faker who reads urg, has found a new way to be
silly.


More likely the program sending the emails has harvested them from an
infected third party who had both addresses in their address book, or even
that the program has moved from address book to address book harvesting a
list of addresses and mixing them up.

A while ago I received an email ostensibly from Alan to one of our
clareassoc addresses. This address is purely an alias: it has never been
used to send email, nor is it used to post to any usenet group, but it has
been fairly widely circulated on the web, is used by our clients and is in
plenty of address books.

If a troll was emailling me manually, I'd rather expect them to use my
posting address, which is valid, or at least something on the same domain.

I'd guess that someone once emailled us using info@, and the same person
(or maybe even someone they know) happened to have had an email from Alan
as well.

(I don't normally check my junk mail that carefully! I was looking for
something else that had got junked accidentally, and noticed the name).

Victoria
--
Clare Associates Ltd
http://www.clareassoc.co.uk/
--

"Janet Baraclough.." wrote in message
...
The message
from "JennyC" contains these words:


"Alan Gould" wrote in message
...
Some e-mails which contain a virus are being circulated in my name -
written in the style GOULD ALAN. One or two urglers have sent to tell me
that they have received them, and asked me would I check my PC.

They seem to be using my name as well. I too am protected, so please
delete any
suspicious messages from "me"

Jenny

Can either of you say if the recipients' addresses were harvested from
your addressbooks, (or were definitely not in your addressbooks)?
Janet.

I don't know. One person was in my addressbook, but also on URG, so they could
have gotten the address from either source.

Jenny

In message , Janet
Baraclough.. writes
The message
from Sacha contains these words:

I know this isn't addressed to me but in my case, the so-called recipient
was definitely not in my address book.

Well, that sounds like a standard spammers ploy. I get notifications
of the same scam, and just ignore them.

What's been done with Alan and Jenny's faked-ID's, using them to target
viruses *at other urglers*, is a different kettle of fish.

I think it's just a bit of a coincidence - I don't think it's being
targeted at all
--
Chris French and Helen Johnson, Leeds
urg Suppliers and References FAQ:
http://www.familyfrench.co.uk/garden/urgfaq/index.html

In message , Janet
Baraclough.. writes
The message
from Alan Gould contains these words:

In article , Janet Baraclough.
.. writes

Can either of you say if the recipients' addresses were harvested from
your addressbooks, (or were definitely not in your addressbooks)?

Other than my own address, the recipients were not in the address book
of my present PC, but they were in a previous one. One was an urgler a
long time ago. I did not transfer the old address book, or any urg data
when this PC was built two years ago.

Thanks.

It can't be coincidence that the fake-urgler-ID
viruses are being received by other urglers.

Yes it can.

If the machine sending out the viruses is used by another urgler, then
it's quite possible they have various urgler email addresses in their
address books. So if the virus extracts the addresses (for the fake from
and the to addresses) form the machines address book, sooner or later it
will use two urgler addresses.

Not in this case, but I've had virus emails appearing to come from other
members of mailing list and newsgroups before. It could be someone
playing silly bugger but I don't think so.
--
Chris French and Helen Johnson, Leeds
urg Suppliers and References FAQ:
http://www.familyfrench.co.uk/garden/urgfaq/index.html

In message , Janet
Baraclough.. writes

When's the baby due?

Today :-)

But no sign of it yet, had a false alarm a few days a go, but no go
yet.

Helen mucho fed up, and wishes it would just hurry up and 'pop out' as
Elinor says.

Has been much intrigued by how the baby will get out, she considered the
belly button for a while, but decided that is too small.
--
Chris French and Helen Johnson, Leeds
urg Suppliers and References FAQ:
http://www.familyfrench.co.uk/garden/urgfaq/index.html