Apparently some Yahoo users (and perhaps others) are being hit by a
particularly pernicious virus.  You may wish to check your computer, per
below.  Thanks Kathy for sharing the info with us!

Norm

From: K Lambert [mailto:[log in to unmask]] 
Sent: Tuesday, June 02, 2009 2:59 PM
To: Norm Saunders
Subject: Fw: ATTN: Cocker Worm virus

Hi Norm,
 
Turns out I am definitely NOT alone!  You may want to take a look at this.
If you agree that action needs to be taken by other people, you may want to
put a warning out to the other MDOsprey subscribers, especially anyone with
a Yahoo account (they should immediately change their passwords).
 
Thank you,

Kathie Lambert
kbert59 @ yahoo.com
Harwood, MD

--- On Tue, 6/2/09, *~Juli~* Sew Weird <> wrote:

From: *~Juli~* Sew Weird <>
Subject: Re: [stitchdelight] ATTN: Cocker Worm virus
To: 
Date: Tuesday, June 2, 2009, 12:43 PM

I just found that it is the Gumblar Worm which is the Conflicker on steroids
, hey that is a cool sit!
 
http://news. cnet.com/ 8301-1009_ 3-10251779- 83.html
<http://news.cnet.com/8301-1009_3-10251779-83.html> 
To find out if a computer is infected:
1) Locate sqlsodbc.chm in the Windows system folder (by default under
Windows XP, the location is C:\Windows\System32 \);
2) Obtain the Sha1 of the installed sqlsodbc.chm. FileAlyzer
<http://www.safer-networking.org/en/filealyzer/index.html>  is a free tool
that can be used to obtain the SHA1 of a file; 
3) Compare the obtained Sha1 to the list located on the ScanSafe STAT Blog
<http://blog.scansafe.com/journal/2009/5/27/gumblar-modified-sqlsodbcchm-clu
e-to-infection.html> ; 
4) If the SHA1 and corresponding file size do not match with a pair on the
reference list, it could be an indication of a Gumblar infection.
The most effective way to remedy an infection is to do a full reformat and
reinstallation, according to ScanSafe. Passwords or login details that were
stored or used on infected machines should also be changed. 
 
----- Original Message ----- 
From: Patricia Estes
<[log in to unmask]" target="_blank">http:>  
To: stitchdelight@ yahoogroups. com
<[log in to unmask]" target="_blank">http:>

Sent: Tuesday, June 02, 2009 10:54 AM
Subject: Re: [stitchdelight] ATTN: Cocker Worm virus

V- All this Info was on the news re: the Conflicker Virus.  
Here is a test so that you can check to see if it is on your computer
http://www.conficke rworkinggroup. org/infection_ test/cfeyechart. html
<http://www.confickerworkinggroup.org/infection_test/cfeyechart.html> 
This is a link about the worm virus and how to handle it. 
http://www.conficke rworkinggroup. org/infection_ test/cfeyechart. html
<http://www.confickerworkinggroup.org/infection_test/cfeyechart.html> 
 
Pat

__._,_.___

.
 
__,_._,___