The mydoom virus has penetrated Wizards...

[Piratecat]

I just got a virus-laden email from Wizards. Third virus from a game company today!

 

[Krieg]

Too bad they're in Seattle, otherwise I'd tender an offer for a new IT/security company (ie mine). lol

 

[Hand of Evil]

I think it is humorous a MOD's post gets moved to another forum.

 

[Piratecat]

I moved it myself, after realizing I had posted in the wrong forum. Wise guy.

 

[Dogbrain]

I just got a virus-laden email from Wizards. Third virus from a game company today!

If it's like the majority of such viruses, you did not. You got an email from somebody who has the wizards email address on his computer, and the virus harvested it to spoof as a source.

 

[Ashrem Bayle]

If it's like the majority of such viruses, you did not. You got an email from somebody who has the wizards email address on his computer, and the virus harvested it to spoof as a source.

Yeah, I think thats how mydoom works.

 

[Piratecat]

I'm not so sure, in this case. I checked the trace, and it looked like it did indeed come from Wizard's server.

No big deal either way.

 

[Sir Whiskers]

I'm not so sure, in this case. I checked the trace, and it looked like it did indeed come from Wizard's server.

No big deal either way.

Are you referring to the worm that uses the subject line about being returned mail from the administrator? If so, a quick question:

I use McAfee AV. It did not spot the problem and I opened the attachments (yeah, I fell for it ). I've since deleted the email, run McAfee on my entire system, and run SpyBot. So far I haven't found anything. If it did install a trojan horse, any idea how I can locate and delete it?

Thanks.

 

[LiVeWiRe]

Are you referring to the worm that uses the subject line about being returned mail from the administrator? If so, a quick question:

I use McAfee AV. It did not spot the problem and I opened the attachments (yeah, I fell for it ). I've since deleted the email, run McAfee on my entire system, and run SpyBot. So far I haven't found anything. If it did install a trojan horse, any idea how I can locate and delete it?

Thanks.

Sir Whiskers,

If it is the mydoom virus here is a link to McAfee's profile on it, along with some information about how to remove it, etc.

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983

But, if you have the latest virus definitions and have done a complete scan and nothing was found you may not have launched the virus after all. It could also depend on what email you use...for instance, if it's a corporate email then it could have been scanned before it was delivered to you and the infected files removed. As a result, the attachments you saw could have really been 'empty'.

I'm not sure about McAfee, but Norton has an option to enable email scanning which can also provide an extra preventive measure.

HTH,

LW

 

[tensen]

My guess is that there is a freelance writer or artist who is infected. We are getting a lot of bounced virus infected emails back to our domain.