Is anyone else being flooded with virus alerts?...

[Roy Howell]

Sorry about this OT, but sheesh...I mean I've gotten probably 20-30 emails in the last couple of hours, and the last one was '[email protected]'. My cable service here is called RoadRunner(like DSL), and apparantly they are catching these and warning me not to reply to them.
This just started out of the blue... Anybody else getting these?

[Roy Howell]

I guess not... Well, good. I wouldn't wish it on anybody, but something or somebody has my address targeted for sure. I'm getting an average of 3 emails every time I open OExpress.
I have a router with a built-in firewall, and my OE 'security' is set tight now. So maybe it'll go away.

[basschair]

Yuk, man. My school district's network was invaded over the last week or so. Apparently, a teacher accidentally imported a virus on a disk and took out a good chunk of the network. Sucky.

BTW, got my computer back, wiped out the sys drive, removed the Promise card, and am getting 6.1 and 002r back online now. When all else fails, clean house...

[Roy Howell]

Well yeeehah, basschair...I'm so glad to hear it. I honestly know how it feels when your system is messed up, because I just recently went through it. Funny how quickly we get spoiled again once it's running smooth...

But, you wouldn't believe these 'virus alert' emails I'm getting...about one every 10-15 minutes. I just went to a football game(all I saw was cheerleaders... ), and there are 30 more emails sitting here.(I deleted all the previous ones)...may have to do something drastic.

[butter_lover]

Probably the Spybot worm. I've been seeing quite a bit of this thing in the field. Someone that has your email address in their addressbook probably has the spybot worm or a similar infection.

-bl

[butter_lover]

Oh, and you should probably search your system for winssk32.exe if you have it in %system% you are infected with Spybot. You'll also have references to winssk32.exe in hklm\software\microsoft\windows\current version\run and in hkcu\software\microsoft\windows\current version\run if you have spybot. These registry keys need to be deleted and the winssk32.exe needs to be deleted to free yourself of the beast.

good luck,
bl

[Roy Howell]

butter lover,
I did a normal search and it found no winssk32.exe.
Let me ask you, how do I find and delete something in the registry? I've done it before, but I'm not sure now how.
thanks very much, Roy

[Roy Howell]

By the way, would AdAware find and get rid of it for me, you think?
thanks...

[xnorfin]

If it is the worm that butter_lover thinks it might be, symantec has a removal tool for the worm.
Check out the link, and be sure to read the directions carefully!

http://securityresponse.symantec.com...oval.tool.html

[Bastiaan]

adaware is something that indentifies and blocks spyware. It is NOT a virusscanner.