Beware New Virus

Computer Parts, Games, DVD's, ex-girfriends..well you get the idea. No dealers, referral links, spam, or auctions. Please be sure your email shows in your profile and to post a price when selling.
blade
Posts: 9113
Joined: Wed Nov 22, 2000 1:56 am
Location: LV-426
Contact:

Post by blade »

What you have tangluva is probably spam. No virus I don't think.

The big problem compu is most of these are sent out automatically from those who just don't know what it is so they open the attachement. It then will send the virus along wth a random file from that system automatically to all in their address book. For example the first few I received was from a good member here. He said his gf opened it without thinking and now everyones telling him he's sending a virus out.

The first big clue is that same repeated message. "Hi, how are you. I send you this in order to have your advice." And it always has a double extension(like .exe.bat) since it attaches itself to a random file on the originating system.

So the ones sending you the virus may not be aware at all what they did. Then again some have been sending the virus intentionally to any who had their email in their sig. But most are sent by those not aware what they did.

I've received 3 more today for about 19-20 total. :(
bonkers325
Posts: 601
Joined: Mon Nov 27, 2000 9:09 pm
Location: Brooklyn

Post by bonkers325 »

hah
i average 6 a day on each email account :(
User avatar
Siren
Senior Member
Posts: 140
Joined: Thu Jul 05, 2001 8:59 pm
Location: oregon, USA

still at it

Post by Siren »

the guy's still at it. just got another one today:

Subj: npds
Date: 7/27/01 8:12:29 PM Pacific Daylight Time
From: ctmo@mediaone.net (Craig Morena)
To: inkystarz@aol.com

File: npds.zip.bat (218269 bytes) DL Time (115200 bps): < 1 minute


Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks






----------------------- Headers --------------------------------
Return-Path: <ctmo@mediaone.net>
Received: from rly-ye04.mx.aol.com (rly-ye04.mail.aol.com [172.18.151.201]) by air-ye03.mail.aol.com (v79.27) with ESMTP id MAILINYE310-0727231227; Fri, 27 Jul 2001 23:12:27 -0400
Received: from chmls06.mediaone.net (chmls06.mediaone.net [24.147.1.144]) by rly-ye04.mx.aol.com (v79.20) with ESMTP id MAILRELAYINYE43-0727231130; Fri, 27 Jul 2001 23:11:30 -0400
Received: from oemcomputer.ne.mediaone.net (h0050da671635.ne.mediaone.net [24.128.98.34])
by chmls06.mediaone.net (8.11.1/8.11.1) with SMTP id f6S3BGg24022
for <inkystarz@aol.com>; Fri, 27 Jul 2001 23:11:16 -0400 (EDT)
Message-Id: <200107280311.f6S3BGg24022@chmls06.mediaone.net>
From: "Craig Morena"<ctmo@mediaone.net>
To: inkystarz@aol.com
Subject: npds
date: Fri, 27 Jul 2001 23:15:03 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----26475818_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
Raymond Kim
Posts: 126
Joined: Wed Nov 22, 2000 4:22 am

Post by Raymond Kim »

To remove vb scripting go to "add-remove programs". Click on "windows setup", double click "accessories" and UN-check "Windows scripting host". Click "ok" till you are all out of it and then, bingo. vb viruses can't harm you.


Hi Blade, thanks for the advice, but would you know how to do this in Win2k?
blade
Posts: 9113
Joined: Wed Nov 22, 2000 1:56 am
Location: LV-426
Contact:

Post by blade »

Sorry RC, I never use win2k so I don't know how it's done with it.

I still get 2-3 a day now. Many people are opening this and have no clue what they are opening.
User avatar
Coldfusion
Senior Member
Posts: 176
Joined: Wed Nov 22, 2000 8:34 pm
Location: The USA

Post by Coldfusion »

Watch out for round 2 of the Code Red Virus:

http://www.cnn.com/2001/TECH/internet/0 ... index.html
User avatar
Hipnotic_Tranz
Almighty Member
Posts: 3750
Joined: Wed Nov 22, 2000 6:35 am
Location: Indpls, IN
Contact:

Post by Hipnotic_Tranz »

<i>"Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks "</i>

I've been havin' that guy email me about once every 3 days with some computer shit as the title "GeForce Question" or somethin' like that. I didn't know the person so I have just been deleting them. Glad I never bothered to do anything more than read it once--now it's just an automatic delete :)
[align=center]<img src=http://i54.tinypic.com/j9tydf.gif>
<i>
My get up and go
must have got up and went.
</i>[/align]
Planker
Genuine Member
Posts: 32
Joined: Fri Nov 24, 2000 4:34 pm

here is a website

Post by Planker »

Should anyone aquire this virus this website is helpful

http://www.mcafee.com/anti-virus/viruse ... p?cid=2360

My brothers dumbshit friend was over last night looking at porn and somehow got the virus onto my computer. I was pretty damn pissed as my email addy sent viruses to probably 100 people and now they all think I'm an idiot.

Anyways the moral of the story is if you come home at two in the morning and your brothers friend is on the computer, don't just go to bed without seeing what he's doing, kick his ass, then go to bed, then see what he was doing when you wake up the next morning. hehe.

Lates
I pledge alligence...
To Queen Fragg...
And her mighty state of hysteria.
Post Reply