How would you deal with this - desperate!

About a year ago I did a seed trade with a member at DG.

The member's computer has the Klez virus - as a result of which I am receiving infected emails daily from people I do not know.

I have tried emailing the member - both directly, and through DG - to make them aware that they have the virus on their computer, but to no avail - the infected emails just keep coming!

What can I do?

Pam

Pam,
I would change e-mail address if this is possible, and maby check the old one if its from your server via webmail if they have it.
PS: I'm not sure if webmail would find the virus!!

good luck

best thing I could say is to get Norton Antivirus. I have been getting the same virus but Norton stops it every time

I'm not having a problem with the virus actually escaping onto my computer - because these emails are coming from someone I don't know I am checking them before I even open them - sure enough they're all originating at the same person's computer.

I would like to avoid having to change my email address if I can - I like the mail server I am using, but early this year their page went to being totally in German, so I'd have buckley's chance of understanding it to set up another address.

Pam

that person may not have a clue that they are STILL having the virus and it may constantly send it out to everyone on their mailing list. This is a toughy

Pam,
Flowox speeks german and so do I, if you need help with the site I or we would be glad to help.

Thanks, zameluzza, I'll bear that in mind.

Flow, that's my point exactly - apart from the inconvenience to me of having these infected emails coming in every day, there are probably a lot of other members who are having the same problem.

I received a notice from my ISP again today that the virus had been sent to me, and they had removed it. They don't tell me where it originated, though.

I got two today myself. one was a juno mail and don't remember the other one

Like zameluzza said, we would be more than happy to help you out with the german :)

change your addy. Don;t open mail from people you Don;t know.

gardengal, can you check the 'block sender' box or something similar in your email program? That might work if it is coming from the exact address each time. John

If something like this happens, can we notify the people through here? If it were coming from me, I sure would want to know.
Sue

If they'd already tried to contact me personally, I wouldn't have a problem with someone posting here to let me know. Actually, I wish they would! Maybe if you're still hesitant to announce to the world that the person has a virus, maybe you could just post looking for them and saying it's imperative that they contact you?

UH OH me too!
Please contact your system administrator.


The infected component in the scanned document was deleted.


Virus Information:
The attachment License.exe contained the virus W32.Klez.H@mm and was
deleted.

I will call my isp NOW! I will report back what I find out. Too bad I wasn't sick just a little longer I guess. Seems somebody is out to get DG'ers I think. We won't give up though. Now we should all request a prayer for the sicko that did this. Prayer group time.
Carol
napping in nj
NOT

Many times people are unaware they have sent, or sometimes that they even have, a virus. They don't actually do it - the virus leeches to their address book and off it goes, unbeknowst to the owner of the address book. So please try to contact them, if possible. Through this site would be good idea, I would think. But if you have a really good anti virus program like Norton with Auto-Protect, and make sure the updates come automatically, then the less likely this is to happen. If you have high speed, cable connection, then a Firewall is absolutely necessary, since the system is running all the time, more or less. Look into Zone Alarm or some other firewall protections. The "block sender" (under "message rules") idea is a good one, if you have no protection. it's most likely already sent out infected emails to everyone in your address book. But on the bright side, if the folks in your address book have good protection, their antivirus program has stopped it in its tracks and they are completely unaware, unless they do a check on the protection program. So hope for that. But for this instance I would think "block sender" could work, and to set up rules regarding this individual's address. If this member is still not "cleaning up" his computer, so as to not infect others, then you can strengthen the rules to never get mail from him. All in all, a good antivirus and or Firewall program is the best route in the end, I think. Some virus can do monumental damage which can cost far more than the cost of the program itself.

This message was edited Tuesday, May 14th 2:55 AM

I had avg running in the background and I still got it. I'm on DH's computer this morning :(

My understanding of the klez worm is that it harvests addresses on the infected machine -- not just from the address book, but also from messages in your mail folders and even temporary internet files in your cache etc. -- and then picks one to insert as the sender.

So the address in the send line isn't necessarily the person who passed along the virus. It only means that that address was somewhere on the infected machine.

Make sure you keep your anti-virus software updated. Don't open attachments you aren't absolutely sure are legitimate, even if they are from someone you know. And it's a good idea to run special diagnostic programs to detect the klez worm, just in case. (Norton's has one. See their website.)

I got it from my yahoo account and it didn't have an attachment. I'm positive. and I know I have it, all my virus programs starting shutting down, and it's exactly what the Norton site said it would do. I won't go with free virus protection anymore, this is it. I went through all this a few months back, and just found out from Norton that it might have been a virus too, same symptons and same thing I'm going through now. I'm totally exasperated, I don't have time to go through this, it's spring! but I have to have my DG!!!

After all the trouble with cable; than DSL. and being sick for so long I could scream with this virus. Pray for the poker; pray I never find out who it is. I know not the Christian way.
All my hopes of trading this week and getting cleaned up here are down the tubes now for sure.

Certainly not napping in nj now. Haven't been to bed yet since Monday at 4:30AM. I may need some serious expert here anyone wanna give me a head up on that?

Please do not e-mail me at my addy. til further notice.

Info about Klez and how to get rid of it: http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html

carol, in same boat here. go to the link that Chele posted right above me, if it's not too late, you can fix it that way. it's too late for me that way, hope i can save that computer by formatting.
as for it getting your addy, a dear lady got it from me, but she's never been in my address book. can't think of any mass mailing from a friend lately that had us both, but anyway, my name was at the top. :( what bothers me the most is that I thought I was protected, and now other people have this or might get it and got it from me, or have my name associated with it anyway.
sorry :(

TUVM
All of you have been so kind. Please no one e-mail me! Guess those trades aren't going out after all not today anyway. Sorry!

Badseed, Bless your heart at this point Cincinatti sound real good. But you better watch out that black cloud follows me whereever I go :-(

I just worry about who I have hurt by this. I haven't heard from many of my friends that are NOT on DG.

I feel terrible.

Where is the best place to post the fact that NO ONE should e-mail me on DG.

maybe just start a new thread? I'm very fortunate, I do have a laptop DH uses for work. my best wishes are for you, and I sure understand, I am trying to save all the info on the secret trade!!! :( too busy to back it up. Lesson learned!

Nobody should feel bad about passing a virus, if they didn't know they had it, and most of the time you don't until someone tells you or it messes up your computer. Be mad at the jerks that sit around and make these things. :)

I have got ast least 4 messages from folk's I know with a "strange" subject, & always with attachments - so I just don't open them, just delete them. I even got one from Dave last night, saved it to disk and then could look at it safely - it wanted me to update my Credit Card info -I don't think Dave would ask in such a way. It had a subject of just "SOS"! The attachment appeared to be from McAfee, wanting me to update Credit card info. I don't mean that Dave is infected - we reported it to McAfee.

It seems this "thing" changes the subject line, so we all have to be really alert. Just because you got one from someone - it doesn't necessarily mean their computer is infected. I am not infected - keep running scans, have a firewall and 2 anti-virus programs, but if you get an email from me with attachments, just delete it unless it comes through Daves. This virus can steal your name & addy without you being infected, but can then infect the receiver if it is opened - really vicious.

Mcafee is one of the random words the virus uses in the title, so is Norton. I hate this, and have no idea what it might have gotten off my computer.

TIG - did you run a scan to see if you are really infected???

Be sure to make a copy of all yur Docs & emails adys & pics and anything else that is important before you reformatt. Last winter, I had to do this - if you have a cd writer it makes it easier, but you can back up most stuff on regular gfloppys, anything that is not infected.

Carol and Tig you both have my sympathies - there has to be better things to do than deal with stupid viruses.

In my own case I was sort of forewarned - a trading friend here in Australia received a suspicious-looking email (very early on, the night before Klez had been announced)supposedly from me - she had the presence of mind to query it.

I don't open anything that looks suspect - if you're in doubt you can check ............

another one just came in - ^*&^%$%^@# ......

........ you can check if you are using Outlook Express - with the preview pane disabled before right-clicking on the header and going 'properties', then 'details' and 'message source' - you can read the message in its entirity without ever opening it. The person whose email address appears in the top line here as the 'return path' is the one who has the infected computer - this is NOT same person as the 'sender'.

Is there anyone, ANYONE AT ALL who is in regular contact with JCF? I'm beginning to wonder if this darned this is somehow screening her email to remove any that contain the word Klez.

Pam

janet posted on the trading forums to leave messages for her there, she's not able to use email. apparently this one also can make it appear that it's from person A, but they aren't really infected.

tiG I realise that - the emails are not coming as addressed from Janet - they're from other people who are obviously in her mail files somewhere .......... thanks for the tip, though, I'll go leave a message for her there.

Pam

Thankyou all soooo much for your help - this is my second morning klezmail-free :)

The people at Daves are such a great bunch of people.

Pam