[VCHPOA Agenda] URGENT: Infected machine

Agenda at vchpoa.org Agenda at vchpoa.org
Wed Jun 9 15:48:31 CDT 2004


I don't normally pass virus messages on the list, but this one is 
affecting the website:

Someone with a VCH connection has an infected computer.  I don't know who 
it is, but your machine is spewing out infected messages to the Internet. 
 The virus is putting fake addresses in the From: field, so they appear 
to coming from innocent parties, such as vchpoa.org.

This is serious because our website was shut down due to 2200 bounce 
messages in 3 days.  If this doesn't stop today, I will report the 
information I have to the ISP and ask that your account be closed.

This is what I have:

The user is connected to a DSL line on SBC (PacBell, Nevada Bell).  Some 
of these domains and users are in the addressbook or inbox:

delorme.com
firesofdarkness.com
iowatelecom.net
mattgelsorealestate.com
nifc.blm.gov
nvcp.edu
nyecounty.net
remsa-cf.com
rmhllc.com
santarosa.k12.fl.us
sierratradingpost.com
skyeone.com 
whitewatervoyages.com

Ben_Hinkle
ESteadman
Fairfax
fallon.center
FWilliams
GAlcock
gaijin00
LMcCammon
SKeck
WGreen


If these names seem familiar to you, get thee to an online vuirus 
checker, PLEASE!

http://housecall.trendmicro.com/housecall/start_corp.asp
http://housecall.antivirus.com/housecall/start_frame.asp
http://www.pandasoftware.com/activescan/com/activescan_principal.htm


-- 
Jim Poston, Listowner
VCH-owner at onelist.com




More information about the Agenda mailing list