E-Mail virus....

[Ryan from Ohio]

Ok I know enough about virus's sent by e mail to keep me safe. THis newest deal has me confused...

Currently I have been using Web Mail from my ISP. I log onto their site and its all hosted by them...

These emails I have been getting are rather wierd. Heres some cut n paste:

Code: Select all

 	

Tim,
 
my name is John Nau and we run support for Berrymetal.
We do not beleive that this message originated from our servers.
Sober32 is likely the cause and the source is elsewhere.
 
Thank you

	-----Original Message----- 
	From: Tim Randall [mailto:[email protected]] 
	Sent: Mon 5/23/2005 9:48 AM 
	To: Cummings, Terry F; [email protected] 
	Cc: 
	Subject: RE: Blutige Selbstjustiz
	
	

	Please remove me from your e-mail
	
	-----Original Message-----
	From: Cummings, Terry F [mailto:[email protected]]
	Sent: Monday, May 23, 2005 8:26 AM
	To: [email protected]
	Subject: RE: Blutige Selbstjustiz
	Importance: Low
	
	Please quit sending me e-mails!
	
	Thanks,
	Terry Cummings
	Maintenance Manager
	Herff Jones Inc.
	940 West 1400 North
	Logan, UT. 84321
	[email protected] <mailto:[email protected]>
	Phone: 435-753-7830
	
	
	-----Original Message-----
	From: [email protected]
	[mailto:[email protected]]
	Sent: Friday, May 20, 2005 7:45 PM
	To: [email protected]
	Subject: Blutige Selbstjustiz
	
	
	Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum
	noch zu durchdringen. Die Gerichte tragen Mitschuld.
	
	Weiter auf:
	http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html
	

Code: Select all

Beverly,
 
 
 
my name is John Nau and we run support for Berrymetal.
We do not beleive that this message originated from our servers.
Sober32 is likely the cause and the source is elsewhere.
 
Thank you

	-----Original Message----- 
	From: Beverly Wilson [mailto:[email protected]] 
	Sent: Mon 5/23/2005 9:04 AM 
	To: Wray Henry E Sr Civ WRALC/MANPF; [email protected] 
	Cc: 
	Subject: RE: Automated Reply from Frank Young <[email protected]>
;
	
	

	I have been added to your email list in error.  Please remove.
	
	Beverly Wilson
	
	-----Original Message-----
	From: Wray Henry E Sr Civ WRALC/MANPF [mailto:[email protected]]
	Sent: Monday, May 23, 2005 5:55 AM
	To: [email protected]
	Cc: Wray Henry E Sr Civ WRALC/MANPF
	Subject: FW: Automated Reply from Frank Young
	<[email protected]>
	
	
	Gentlemen,
	Please remove my name from your database. The military E-mail system is for
	official use only and does not need to be filled up with notifications every
	time some one in the U.S. goes out of their office.
	Thank you,
	Henry Wray
	402 CMXG/MANPF
	[email protected]
	
	-----Original Message-----
	From: Frank Young [mailto:[email protected]]
	Sent: Friday, May 20, 2005 9:32 PM
	To: [email protected]
	Subject: Automated Reply from Frank Young <[email protected]>
	
	I will be out of the office the afternoon of Tuesday 5/17 through the
	remainder of the week. I will return Monday, May 23. If urgent contact or
	copy Judy Dent at [email protected].

Code: Select all

From:[email protected] Save to Address Book    
		
[email protected]
		
PLEASE REMOVE MY NAME FROM THIS LIST
		
Mon, 23 May 2005 11:26:03 EDT
		

  	
  	

PLEASE REMOVE MY NAME FROM THIS LIST

Code: Select all

  	

Terry,
 
my name is John Nau and we run support for Berrymetal.
We do not beleive that this message originated from our servers.
Sober32 is likely the cause and the source is elsewhere.
All e-mail from berrymetal is tagged with a confidentiality agreement.
 
 
Thank you

	-----Original Message----- 
	From: Cummings, Terry F [mailto:[email protected]] 
	Sent: Mon 5/23/2005 9:26 AM 
	To: [email protected] 
	Cc: 
	Subject: RE: Blutige Selbstjustiz
	
	

	Please quit sending me e-mails!
	
	Thanks,
	Terry Cummings
	Maintenance Manager
	Herff Jones Inc.
	940 West 1400 North
	Logan, UT. 84321
	[email protected] <mailto:[email protected]>
	Phone: 435-753-7830
	
	
	-----Original Message-----
	From: [email protected]
	[mailto:[email protected]]
	Sent: Friday, May 20, 2005 7:45 PM
	To: [email protected]
	Subject: Blutige Selbstjustiz
	
	
	Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum noch zu 
durchdringen. Die Gerichte tragen Mitschuld.
	
	Weiter auf:
	http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html
	
	
	

Code: Select all

From:"Lance Reynolds" <[email protected]> Save to Address Book    
		
To : <[email protected]>
		
Subject : TEST
		
Date : Mon, 23 May 2005 11:21:02 -0400
		
	
  

  

Code: Select all

From:[email protected] Save to Address Book    
		
To : [email protected]
		
Subject : Opt-Out
		
Date : Mon, 23 May 2005 11:56:38 EDT
		
		
		

 
  	
  	

Please remove my name from your list.
  	

Im not sure how I got associated with this. I dont know any of these people that Im aware of. None of these emails have been directed to me, but rather other persons... Which is strange. I have not received any virus threats as I get notified...

If your name is on that please fix your stinking comp already.

The only thing I know for sure is whoever is resposnible is this: [email protected]

As it is associated with EVERY EMAIL I got like that...

If I dont keep up with it they will flood my inbox preventing anymore mail...

[NorthQuad]

Sober32 is a medium risk worm. It's a mass mailing worm that displays a fake error message on the infected PC.

[Ryan from Ohio]

Doesnt explain why I would keep getting these emails.

Since its webmail and my ISP blocks all virus's I know I dont have one. I access my email at work and home via the webmail deal.

So I dont have it, these other people may. But I have NO CLUE who they are or how my info could be on ANY of their comps...

[Scarrell]

its probably just junk mail.... i can get crap similair to that all the time... they start using names and the subjects seem to be stuff i read or something... i probably have some key loggers.

[William from NOLA]

I'd run some online scans, particularly with http://www.pandasoftware.com. You could have a worm and won't know it, so if you haven't already, do so.