DearDiary.Net and Viruses.

I think a slight misconception has arisen since the installation of the filters for the deardiary.net servers.

DearDiary.Net is NOT spreading any viruses.

However, the DearDiary.Net server WILL alert you if it receives an email from you that it believes has the virus. It will only do this if it receives a suspicious email from you. I am completely confident of this because;

1) All the present hysterical worms are written for WINDOWS machines. DearDiary.Net runs on a UNIX server.

2) All the present hysterical worms are written and use MAPI functions of WINDOWS email clients such as Outlook, Outlook Express, possibly Eudora and others.

Many many of you have support@deardiary.net, webmaster@deardiary.net or abuse@deardiary.net in your address books. Many more of you have those addresses in your Web cache on your hard drive. The latest worms use both of these places as sources of email addresses to send themselves to, thus your computers are silently and secretly emailling our support address TRYING TO INFECT US. Not the other way around, and THIS is what our server is telling you.

I hope this message doesn’t come across as blame, because its not meant to be, these viruses are a pain in the butt and use some very clever techniques to get you to open them. But I can’t stand by and watch the comments that appear to imply the virus is coming from here. It is not.

I hope that clears it up. Please, feel free to email me if you have questions or concerns, I will do my best to help. I’ve been in the business over 10 years (old bastard I know!), I’m not a virus ‘expert’ but I’ve been around enough to know what innoculations to take 🙂

Steve.

BTW, Symantec describe the latest worm thusly;

W32.Badtrans.B@mm is a MAPI worm that emails itself out using different file names. It also creates the file WindowsSystemKdll.dll. It uses functions from this file to log keystrokes.

The full description is available At Symantec

Our server does not have MAPI. It doesnt use W32. It doesn’t have an Kdll.dll. It categorically can not be infected by this worm and cannot spread it.