http://www.teaneckshuls.org/SelectedPosts/VirusesandEmailHarvesting.htm - - -

http://groups.yahoo.com/group/TeaneckShuls/message/11316
From: crshulman@a..
Date: Sun Aug 11, 2002 3:22 pm
Subject: Fw How Viruses Got Around
A new member of the list (& community), who is also the owner of www.godaven.com explained to me how the viruses got around to members of the list. It's very interesting. I've attached the email.
----
Subj: Viruses
Date: Sun, 11 Aug 2002 1:48:13 PM
From: "Joseph Fishkin, MD" <joseph@f..>
[I]n response to the emails you've sent out recently about the viruses...The virus responsible for this whole mess is part of the klez family, and the way it behaves is that when its run on a computer, it emails itself to someone on the email program (usually outlook) address list found on that computer, but inserts as its "return address" another of the emails found on that computer. What that means is that if you were to receive the virus from me, what is actually happening is that you are receiving the virus from someone who has both your email address as well as my email address on their system.
For example, I've recently received some complaints from people receiving an email virus from m...@godaven.com, while it's actually impossible for me to send emails from that email address - it's a catch-all address that redirects email to my personal email address. Still, it looks to people like they're receiving virii from there because somebody has both m...@godaven.com as well as many other personal email addresses listed on their computer.
This is why people have been receiving virii from many people on the teaneck-shuls email list - it's not that all these people have this virus - it's more likely that one person, who has many of the members' email addresses stored on their computer, has the virus.
Just FYI :)
Yosi

- - -

Subj: viruses abounding
Date: Tue, 27 Jan 2004 
From: Chaim Shulman <CRShulman@aol.com>
There are some new viruses that have started appearing, to my understanding, in the last day or so (see attached email).
One of the consequences of viruses is that you may get viruses disguised as teaneckshuls email. So be careful not to open any attachments (no attachments are ever sent on teaneckshuls). Also, ignore any unsub or change of sub info you get (unless it actually results in a change you don't want).
 

- - -

Subj: Virus Causing Changes to Your Method of TS Delivery
Date: 5/5/2004
From: CRShulman@a..
To: teaneckshuls@yahoogroups.com
See post below regarding Netsky virus that causes method of yahoogroups delivery to change. To fix it, just send a blank email to teaneckshuls-normal@yahoogroups.com , teaneckshuls-digest@yahoogroups.com or teaneckshuls-nomail@yahoogroups.com
Thanks
Chaim

http://groups.yahoo.com/group/EmailList-Managers/message/67161
From: <m.sluiter@p...>
Date: Sat Mar 27, 2004
Subject: V*irus trouble affecting yg-users

Find what I wrote recently on groups I administrate. Feel free to copy/use this for your own list if you want. You have to fill in below on the place of the xxxx the name of your own group of course!

Hi all,
The list administration received several questions to the -owner address about why some ones subscription had been changed or why they received a note that they wished to subscribe/unsubscribe while they do not want to. Please read the explanation below so you are informed why this can happen and know what to do when it happens to you:

The newest generation of viri (viruses?), currently mostly variations of the Netsky one, have an inbuilt way to disguise themselves. They grab an e-mail address found on the computer they have infected due to negligence of the owner (no updated virus scanner running) and paste this at the sender place so the virus seems to come from some one else. Then copies of the virus are distributed to all possible e-mail addresses also found on this computer.

This can be a nuisance when such an e-mail is sent to a mailing list address and the random address picked by the virus as sender also is a member to that list since then it will appear (as happened recently a few times). When a mailing list is set to allow attachments, also viruses will reach the list, when the list is set to discard them only the weird messages without the virus load will be distributed. Now at least you now know why sometimes weird messages appear.

However - another side effect of these disguises is somewhat more of a nuisance. When a virus is sent to one of the command addresses ánd the e-mail address used as fake identity is a member of that list, weird happenings can and do occur and you all will have to be aware:

- if the email is sent pretending to be a list member to either: xxxxx-nomail@yahoogroups.com xxxxx-normal@yahoogroups.com xxxxx-digest@yahoogroups.com it means your delivery mode has been changed. Fortunately you will get a notification from yahoogroups about this so you can easily restore this by sending an appropriate new email to the appropriate address (so choose for respectively reading-on-the-web, individual mails, or one digest mail - see above)

- If the email is sent pretending to be a list member to xxxxx-subscribe@yahoogroups.com the member will receive an e-mail notification from yahoogroups telling him/her that they asked to subscribe but since they already are a member the request is discarded. If it happens to you don't do anything, you now know why it happens.

- If the email is sent pretending to be a list member to xxxxx-unsubscribe@yahoogroups.com the member will receive an e-mail notification from yahoogroups telling him/her that they asked to get off the list and if this indeed is their wish they should confirm this by replying to the mail just received. Discard this mail and trash it and you will safely stay aboard.

- If the email is sent pretending to be a list member to xxxxx-help@yahoogroups.com you will receive without having asked yourself the automated help file available. No harm done here, but it can come as a surprise of course <g>

So all in all extra nuisance caused by virus makers and now you know what to do when it hits you. Please be so polite when participating on a mailing list to have an updated virus scanner running and additional when you have a cable connection a proper firewall. If any one has further questions please *only* adress them to the xxxxx-owner@yahoogroups.com address as not to clog up the list.

List administration team xxxxx-owner@yahoogroups.com