Virus Inundated
Tuesday, July 24, 2001 by gillon | Discussion: WinCustomize Talk
For the past few days, my inbox has been bogged down with 3 to five virus attached messages. They usually have something to do with skinning in the subject line. Anyone else receiving these?
>
>
Jafo
Reply #2 Wednesday, July 25, 2001 1:23 AM
Reply #2 Wednesday, July 25, 2001 1:23 AM
The cure link is posted on one of the other threads....my one, I think....shall check for you...
AJCrowley
Reply #3 Wednesday, July 25, 2001 1:44 AM
Reply #3 Wednesday, July 25, 2001 1:44 AM
I've received the email in discussion a few times now, but each time, the attachment has only been a 59byte ATT0004.DAT file. There's no way a file this size could carry this virus, so I opened it up in HexEdit, as I always do with viruses to find that it was empty. I checked my machine for symptoms of the virus, and it came out clean. Just interested if anyone else is receiving this version of it, or if anyone has actually seen the mystic .exe that's supposed to be attached?
Cheers,
AJ
Cheers,
AJ
DavidK
Reply #4 Wednesday, July 25, 2001 2:04 AM
Reply #4 Wednesday, July 25, 2001 2:04 AM
The file attachment is a randomly chosen file from the host computer so each mailer will have a different subject line and a different attachment. So far all of them I've gotten (the sircam virus) have been over 200k. I also got one called the W95MTX matrix worm/virus combo a few days ago. That one came in about 7 times (it shows up as two consecutive emails) and I've gotten the sircam about thirty times so far.
pjpowell
Reply #5 Wednesday, July 25, 2001 3:24 AM
Reply #5 Wednesday, July 25, 2001 3:24 AM
sircam up to 58 now and counting. 54 of them from the same address. I can tell when they go online (or go offline) because the virus stops being sent. It's just started again. They must have just gone online cos I checked at 6:30 (UK) and had not received any for several hours. 48 was the amount at 12:00 last night (UK) which had not changed by 6:30 (UK).
pjpowell
Reply #6 Wednesday, July 25, 2001 3:26 AM
Reply #6 Wednesday, July 25, 2001 3:26 AM
And by the way thanks jafo for posting the link to m@ilsafe. Right after I installed it I saw it had intercepted an email to my sister (everything goes through my VPop server) containing it. She would definitely have opened that email attachment with no thought of viruses.
Jafo
Reply #7 Wednesday, July 25, 2001 5:01 AM
Reply #7 Wednesday, July 25, 2001 5:01 AM
I'm still the proud owner of 3 versions....in quarantine...if anyone does need it to evaluate.....2 .com's and a .pif ....all originally Dangeruss - related topic headings....but I have been clean for ages, now....this was only on the very first day....
Jafo
Reply #9 Friday, July 27, 2001 2:50 AM
Reply #9 Friday, July 27, 2001 2:50 AM
Just got a new one...JabScreenSaver2.zip.pif....
Like-wise in quarantine....
Came from Somatic8....damn 700k file, too....
Like-wise in quarantine....
Came from Somatic8....damn 700k file, too....
paxx
Reply #10 Friday, July 27, 2001 6:44 AM
Reply #10 Friday, July 27, 2001 6:44 AM
The virus attaches a random file from your system... Imagine it randomly chooses a 100 Meg file or above (yes, I have some of those, mainly PSDs though).
Tarkus
Reply #11 Friday, July 27, 2001 3:48 PM
Reply #11 Friday, July 27, 2001 3:48 PM
The cure is actually don't execute unknown attachments. Why is everyone always looking for something to save them from themselves? 
I've gotten a couple of these. Ran them through IPE, more out of curiosity than anything else. And then I deleted them. No big deal. I wouldn't have executed them even if IPE found them to be completely clean.
JayG: What the heck is a viri?
I've gotten a couple of these. Ran them through IPE, more out of curiosity than anything else. And then I deleted them. No big deal. I wouldn't have executed them even if IPE found them to be completely clean.
JayG: What the heck is a viri?
risblaque
Reply #12 Friday, July 27, 2001 4:29 PM
Reply #12 Friday, July 27, 2001 4:29 PM
One ATT01546.ATT (78b) got into our environment. Also attached was a text file Alert.TXT. It had the Hi.... message body and subject line was foedselsdag I think that's Danish.
It somehow went into the wrong inbox and the user deleted it.
It's the first to slip through our firewall and quarantine folders.
It somehow went into the wrong inbox and the user deleted it.
It's the first to slip through our firewall and quarantine folders.
berzerka
Reply #15 Saturday, July 28, 2001 9:49 AM
Reply #15 Saturday, July 28, 2001 9:49 AM
am i the only person who hasnt been sent this virus?!!
Maxim
Reply #16 Saturday, July 28, 2001 11:49 AM
Reply #16 Saturday, July 28, 2001 11:49 AM
I've only had one, strangely from someone who has never sent me any email.
Oh, and Jafo... "virii" is not a word. The plural of "virus" is "viruses"... http://www.dictionary.com/cgi-bin/dict.pl?term=virus
xi xi xi...
Oh, and Jafo... "virii" is not a word. The plural of "virus" is "viruses"... http://www.dictionary.com/cgi-bin/dict.pl?term=virus
xi xi xi...
Tarkus
Reply #17 Saturday, July 28, 2001 8:59 PM
Reply #17 Saturday, July 28, 2001 8:59 PM
Jafo: What Maxim said.
Heh heh. Jafo misspelled a word.
Heh heh. Jafo misspelled a word.
Jafo
Reply #18 Saturday, July 28, 2001 10:13 PM
Reply #18 Saturday, July 28, 2001 10:13 PM
And you all thought I was 'trying' to be correct?....
BTW....3 Viruses would be 'viriii'.....
BTW....3 Viruses would be 'viriii'.....
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Tuesday, July 24, 2001 11:00 PM
nasty one called sircam32