LighthouseKeepers.com

VIRUS ALERT--uses Harbour Lights spelling

Posted By: ladylightkeeper

VIRUS ALERT--uses Harbour Lights spelling - 05/13/03 07:45 PM

Has anyone else received this, which I will "copy" here as it appears on my webtv screen? I use a webtv, not a computer, and therefore can't get a virus. But I think a webtv can pass a virus on through a forwarded message.

I emailed Lamar to warn him first, and then sent him the email I had gotten, as he is an expert in detecting viruses. He has replied and said that this is a virus. Here are his words: "Yes, it is a virus. It just says it is from 'webmaster', NOT HL's (or anyone else's) webmaster."

Here is the suspicious email that I received as it appears on my screen:

********
From: webmaster@HarbourLights.com (webmaster)
Date: Mon, May 12, 2003 1:38 PM
To: -- my address appeared here
Subject: little popup remover

"I sent this program (Sparky) from anonymous places on the net."

attachment symbol here and then "Faith872.com (octet-stream attachment)"

**************

I hope this helps someone avert getting a virus if they receive this same message, as it sure looked legit with the Harbour Lights wording.

John, I am saving this virus-infected email for now in my webtv memory, in case you would like me to send it to you to investigate it, seeing as how someone is using the Harbour Lights corporate name here. Let me know.

If anyone else has received this same email, post about it here to determine if somebody out there is getting hold of our forum addresses somehow. Hope this helps someone.

Barb
Posted By: plebetkin

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/13/03 07:54 PM

is it a harmless virus message or does it actually then do something to one's computer?
Posted By: Larry

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 05:23 AM

This is the "Fizzer" Worm

Be sure your virus definitions are up to date.
Posted By: Webmaster

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 08:41 AM

I don't know if my computer got infected or if someone is 'spoofing' my email address. In any case, I'm on the road now, but in checking my email early this morning I had a WHOLE BUNCH of 'bad addresses' notifications as if I had sent out hundreds of emails (but none show up in my Outlook SENT files folder.

Zina reports they found the virus one one or more of the PCs at HL.

I normally don't open any files that are attached to unknown emails. Don't even look at 95% of the emails I receive (deleted based on SUBJECT or FROM).

And have Norton running on my incoming and outgoing emails 100% of the time.

So did lots of you get an email from webmaster@harbourlights.com?
Posted By: Bob M

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 12:09 PM

I haven't received anything from that address in quite awhile. No junk mail arriving at this terminal related to Harbour Lights in any form.

:rolleyes: Bob :rolleyes:
Posted By: mombo

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 07:34 PM

Nothing here.
Posted By: Dave H

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 08:13 PM

Not I.
Posted By: wheland

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 10:45 PM

I didn't get any either.

Dennis
Posted By: flacoastie

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 11:28 PM

I haven't gotten any.
Posted By: plebetkin

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/14/03 11:29 PM

none. I did update my virus database.
Posted By: MrsTLC

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 01:47 AM

Me either!
Posted By: Pharologst

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 02:07 AM

ZIPPO !!

Posted By: MtnHkr

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 02:15 AM

Adding my two cents worth!

Nothing here either.

Bert laugh
Posted By: Ron

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 03:46 AM

Nothing Yet!
Posted By: DANIEL

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 04:08 PM

Nope
Posted By: BGBaccaro

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 04:56 PM

Nothing here yet, either. I have Norton's running 100% of the time and do live update frequently to obtain latest info from Norton's.

Bruce
Posted By: Randy Kremer

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 08:02 PM

Well, this looks like roll call ....

smile Not me either ... smile
Posted By: LamarB

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 10:01 PM

As system admin for the company that employs me, I do have quite some experience with computer security issues. Larry is correct in that it is definitely the Fizzer worm. I personally have not received it but ladylightkeeper forwarded me hers and I analyzed it. It looks to me like the email headers have definitely been forged to look like Saint John sent it when in fact he really did not. This is quite a common ploy among these scumbags. It happens to me pretty regularly.

I too will emphasize the importance of running a reputable virus scanner on your PC and keeping it updated regularly.
Posted By: ladylightkeeper

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/15/03 10:31 PM

John: Well, I guess my email to you is among the 95% you delete. I wrote and asked you if you wanted me to send you the actual "sparky" email from HL. I have it sitting in my save box. Please let me know what I should do with it. Would hate to accidentally send it to someone! But thought maybe you might want to play sleuth and try to find out who is doing this to you. It is possible to get it traced, isn't it? Will wait to hear. Thank you. Barb
Posted By: mombo

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/16/03 03:15 AM

Barb, I believe John is gone for a few days.
Posted By: Webmaster

Re: VIRUS ALERT--uses Harbour Lights spelling - 05/16/03 07:43 AM

Barbara - sorry I must have deleted your email. I apologize. I got an email from Lamar who has posted what he found. I now don't believe that an actual email went out from my computer, and probably didn't go out to my email address book. It could be that my webmaster@harbourlights.com address was 'lifted' by the fizzer from someone else's computer and went out to someone else's list.

Because the infected email was 'apparently' from me, I got lots of return notices from various domains telling me about bad addresses of infected emails. That accounted for most, if not all, of the viruses that were coming my way until Norton intercepted them.
© 2024 Collector Forums