Search
Forum Home | Login
gillon
gillon
Join Date 03/2001
0

Virus Inundated

July 24, 2001 10:51:24 PM from WinCustomize ForumsWinCustomize Forums
For the past few days, my inbox has been bogged down with 3 to five virus attached messages. They usually have something to do with skinning in the subject line. Anyone else receiving these?
>
Locked Post
Search this post
Advanced Search
Subscription Options
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
DavidK
Join Date 03/2001
0
Reply #1 July 24, 2001 11:00:22 PM
from WinCustomize ForumsWinCustomize Forums
it's been in two or three threads here and a news post on the front page. and, yes, I think at this point we're all getting it...

nasty one called sircam32
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Jafo
Join Date 03/2001
+1845 sdemployee
Reply #2 July 25, 2001 1:23:24 AM
from WinCustomize ForumsWinCustomize Forums
The cure link is posted on one of the other threads....my one, I think....shall check for you...
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
AJCrowley
Join Date 06/2001
0
Reply #3 July 25, 2001 1:44:28 AM
from WinCustomize ForumsWinCustomize Forums
I've received the email in discussion a few times now, but each time, the attachment has only been a 59byte ATT0004.DAT file. There's no way a file this size could carry this virus, so I opened it up in HexEdit, as I always do with viruses to find that it was empty. I checked my machine for symptoms of the virus, and it came out clean. Just interested if anyone else is receiving this version of it, or if anyone has actually seen the mystic .exe that's supposed to be attached?

Cheers,

AJ
Reason for Karma (Optional)
Successfully updated karma reason!

Sign Up or Login and this ad disappears!
There are many great features available to you once you register. Sign Up for a free account and browse the forums without ads.

gillon
DavidK
Join Date 03/2001
0
Reply #4 July 25, 2001 2:04:58 AM
from WinCustomize ForumsWinCustomize Forums
The file attachment is a randomly chosen file from the host computer so each mailer will have a different subject line and a different attachment. So far all of them I've gotten (the sircam virus) have been over 200k. I also got one called the W95MTX matrix worm/virus combo a few days ago. That one came in about 7 times (it shows up as two consecutive emails) and I've gotten the sircam about thirty times so far.
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
pjpowell
Join Date 03/2001
+1
Reply #5 July 25, 2001 3:24:18 AM
from WinCustomize ForumsWinCustomize Forums
sircam up to 58 now and counting. 54 of them from the same address. I can tell when they go online (or go offline) because the virus stops being sent. It's just started again. They must have just gone online cos I checked at 6:30 (UK) and had not received any for several hours. 48 was the amount at 12:00 last night (UK) which had not changed by 6:30 (UK).
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
pjpowell
Join Date 03/2001
+1
Reply #6 July 25, 2001 3:26:21 AM
from WinCustomize ForumsWinCustomize Forums
And by the way thanks jafo for posting the link to m@ilsafe. Right after I installed it I saw it had intercepted an email to my sister (everything goes through my VPop server) containing it. She would definitely have opened that email attachment with no thought of viruses.
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Jafo
Join Date 03/2001
+1845 sdemployee
Reply #7 July 25, 2001 5:01:44 AM
from WinCustomize ForumsWinCustomize Forums
I'm still the proud owner of 3 versions....in quarantine...if anyone does need it to evaluate.....2 .com's and a .pif ....all originally Dangeruss - related topic headings....but I have been clean for ages, now....this was only on the very first day....
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
JayG
Join Date 04/2001
+1
Reply #8 July 26, 2001 11:06:48 PM
from WinCustomize ForumsWinCustomize Forums
viri make me violent.
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Jafo
Join Date 03/2001
+1845 sdemployee
Reply #9 July 27, 2001 2:50:56 AM
from WinCustomize ForumsWinCustomize Forums
Just got a new one...JabScreenSaver2.zip.pif....
Like-wise in quarantine....

Came from Somatic8....damn 700k file, too....
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
paxx
Join Date 03/2001
0
Reply #10 July 27, 2001 6:44:45 AM
from WinCustomize ForumsWinCustomize Forums
The virus attaches a random file from your system... Imagine it randomly chooses a 100 Meg file or above (yes, I have some of those, mainly PSDs though).
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Tarkus
Join Date 04/2001
0
Reply #11 July 27, 2001 3:48:41 PM
from WinCustomize ForumsWinCustomize Forums
The cure is actually don't execute unknown attachments. Why is everyone always looking for something to save them from themselves?

I've gotten a couple of these. Ran them through IPE, more out of curiosity than anything else. And then I deleted them. No big deal. I wouldn't have executed them even if IPE found them to be completely clean.

JayG: What the heck is a viri?
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
risblaque
Join Date 03/2001
0
Reply #12 July 27, 2001 4:29:05 PM
from WinCustomize ForumsWinCustomize Forums
One ATT01546.ATT (78b) got into our environment. Also attached was a text file Alert.TXT. It had the Hi.... message body and subject line was foedselsdag I think that's Danish.

It somehow went into the wrong inbox and the user deleted it.

It's the first to slip through our firewall and quarantine folders.
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Jafo
Join Date 03/2001
+1845 sdemployee
Reply #13 July 28, 2001 1:36:51 AM
from WinCustomize ForumsWinCustomize Forums
Virus is singular...virii is plural...
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
adni18
Join Date 05/2001
+70
Reply #14 July 28, 2001 9:13:46 AM
from WinCustomize ForumsWinCustomize Forums
Nice one Jafo
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
berzerka
Join Date 06/2001
0
Reply #15 July 28, 2001 9:49:47 AM
from WinCustomize ForumsWinCustomize Forums
am i the only person who hasnt been sent this virus?!!
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Maxim
Join Date 03/2001
0
Reply #16 July 28, 2001 11:49:42 AM
from WinCustomize ForumsWinCustomize Forums
I've only had one, strangely from someone who has never sent me any email.

Oh, and Jafo... "virii" is not a word. The plural of "virus" is "viruses"... http://www.dictionary.com/cgi-bin/dict.pl?term=virus

xi xi xi...
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Tarkus
Join Date 04/2001
0
Reply #17 July 28, 2001 8:59:52 PM
from WinCustomize ForumsWinCustomize Forums
Jafo: What Maxim said.

Heh heh. Jafo misspelled a word.
Reason for Karma (Optional)
Successfully updated karma reason!
gillon
Jafo
Join Date 03/2001
+1845 sdemployee
Reply #18 July 28, 2001 10:13:07 PM
from WinCustomize ForumsWinCustomize Forums
And you all thought I was 'trying' to be correct?....

BTW....3 Viruses would be 'viriii'.....Spell checker
Reason for Karma (Optional)
Successfully updated karma reason!
View all recent posts
Mark all posts as read Delete cookies created by the forum Return to Top
Stardock Forums v        Server Load Time:   Page Render Time: