Attention: Virus on dan@totalwar.org

Hello,

Myself and some others have recently received an email containing a virus from the address dan@totalwar.org. I am sure that this has nothing to do with Dan-sama.

Most of you will probably receive/d the same so be warned: DELETE ANY MESSAGES COMING FROM THAT ADDRESS AND INSTALL AND RUN AN ANTI-VIRUS AS SOON AS POSSIBLE.

The make, effect and running of the virus is not identified yet, but it can be quarantined. I am trying to deactivate the dan@totalwar.org address but please take all necessary safety precuations...

Thanks.

Tera.

------------------
Proud member of Clan Kenchikuka (http://www.kenchi.cjb.net/).
evil is within us... http://terazawa.totalwar.org/emo.gif
Visit my resource site here! (http://terazawa.totalwar.org/)

[Rath]

Well thats screwed...who is the d*ckhead who's behind it ?

[Kurando]

It's probably one of those virus' that get's mailed out to everyone in the person's Address Book (we have those whip thru our Shaw network all the time).

Keep your guard up + I agree with Tera it definitely has nothing to do with Dan being malicious, and if anyone else at the .org is to blame we'll dress him in a hockey uniform and then bring TheRonin out of retirement so he can drive golf balls at the offending party until he illicits a full and undoubtedly remorseful confession.

[Kas]

It's the W32.Nimbda.A@mm(dr) virus.

Keep your virus scanner up to date, I received 6 different virus attacks this week alone...all attacks on my STW-only email adress.

Greetings,
AggonyKasuga

[Kurando]

I, on the other hand, have several totalwar only accounts that I continually used to run tests on the UBB programming, and I have received no odd e-mails in any of them within the past week.

It just doesn't make sense because none of the @totalwar.org e-mail addresses were even initialized when the UBB Admin Center was set-up so there can be no connection between the UBB account that stores your address and any of the @totalwar.org address'. additionally all the passwords originate straight from prime.telefragged.com so there is no connection there either.

Everyone just keep your guard up + report anything suspicious to terazawa@totalwar.org so he can have the telefragged techs look into it.

[TosaInu]

Konnichiwa,

I'm not 100% sure about it (this might be a changed variant) but this tool from symantec removes W32.Nimba (140 kb). http://www.totalwar.org/maps/Nim.zip

------------------
Ja mata
Toda MizuTosaInu
Daimyo Takiyama Shi
http://www.takiyama.cjb.net

[This message has been edited by TosaInu (edited 02-27-2002).]

[This message has been edited by TosaInu (edited 02-27-2002).]

[This message has been edited by TosaInu (edited 02-27-2002).]

[james]

Quote Originally posted by Rath:
Well thats screwed...who is the d*ckhead who's behind it ?[/QUOTE]

some person trying to annoy everyone

[Kurando]

I think it's safe to say that the problem was/is very limited in scope. Tera and the tech people from telefragged checked the matter out and what ever happened it is pretty safe to say that it did not originate from totalwar.org itself.

The only other posibility that the Admin's can fathom is that a virus bot must have sent the infected e-mail's from dan@totalwar.org's home PC, but the account has been disactivated now so there should be no further problems (touch wood).

Please keep your virus software up-to-date and report any follow-up info to terazawa@totalwar.org