Let's play the 'name the virus spreader' game! :)
Thursday, January 29, 2004 by grayhaze | Discussion: WinCustomize Talk
Okay, I'm getting heaps of these damn virus e-mails as a result of the latest idiot virus creation 'Doom'. However, I think I can at least help one person to realise they have the virus on their machine.
Today I got an e-mail to my PayPal donations e-mail account with a spoofed from address of 'ian @ stardock.com' (note the spaces to prevent further spread). So if you have made a donation to me in the past for my skinning work (and let's face it, that narrows it down a heck of a lot
) and also know an Ian who works at Stardock, you might want to scan your machine for the virus.
This public service has been brought to you by grayhaze.com and the letter 'V'.
Today I got an e-mail to my PayPal donations e-mail account with a spoofed from address of 'ian @ stardock.com' (note the spaces to prevent further spread). So if you have made a donation to me in the past for my skinning work (and let's face it, that narrows it down a heck of a lot
) and also know an Ian who works at Stardock, you might want to scan your machine for the virus.This public service has been brought to you by grayhaze.com and the letter 'V'.
 |
|
Page 3 of 3 | |
|
|---|
WebGizmos
Reply #42 Saturday, January 31, 2004 6:37 AM
Reply #42 Saturday, January 31, 2004 6:37 AM
Regarding email protection. When we post our email addresses in these discuss groups...is there any way we can have them spaced such as.... username @ domain.com ... so as not to be picked up by emailbots that hunt for email addresses? I use something on my website that scrambles my email address so its not caught by these bots.
craeonics
Reply #43 Saturday, January 31, 2004 3:13 PM
Reply #43 Saturday, January 31, 2004 3:13 PM
Dear Poor Person's Virus,
I deleted my c:\windows directory. Do you think that covers all essential files? Also, I wanted to send your message to all my friends, but I just realised I haven't got any. Would you mind if I sent it to your friends instead?
It's going to be troublesome if the both of us don't have friends. How are you going to be a successfull virus if you can't spread!?
I deleted my c:\windows directory. Do you think that covers all essential files? Also, I wanted to send your message to all my friends, but I just realised I haven't got any. Would you mind if I sent it to your friends instead?
It's going to be troublesome if the both of us don't have friends. How are you going to be a successfull virus if you can't spread!?
craeonics
Reply #44 Saturday, January 31, 2004 3:16 PM
Reply #44 Saturday, January 31, 2004 3:16 PM
Essencay: The mailserver just replies to whatever address is set as reply-to. Anyone can spoof that.
goodmorphing
Reply #45 Saturday, January 31, 2004 3:29 PM
Reply #45 Saturday, January 31, 2004 3:29 PM
Dear Crae:
Well, the Window's directory is a good start. Do you know any other trendy files that you really need? If you do, please delete those too. I really, really am depending on you to help me build my career.
No friends? Maybe you could try your family... surely you must have a big family.
You could send them to my friends of course, but for some reason I lost track of them after I sent my beta version.
Thanks in advance for making me such a successful virus. This way I am doing at least as much damage as everyone else! And so easy too! I know I can depend on you to do the right thing.
Poor Virus
Well, the Window's directory is a good start. Do you know any other trendy files that you really need? If you do, please delete those too. I really, really am depending on you to help me build my career.
No friends? Maybe you could try your family... surely you must have a big family.
You could send them to my friends of course, but for some reason I lost track of them after I sent my beta version.
Thanks in advance for making me such a successful virus. This way I am doing at least as much damage as everyone else! And so easy too! I know I can depend on you to do the right thing.
Poor Virus
HG_Eliminator
Reply #46 Sunday, February 1, 2004 8:54 AM
Reply #46 Sunday, February 1, 2004 8:54 AM
im telling ya this poor virus is the most polite virus iv seen in a while.... 
Funkygranny
Reply #47 Sunday, February 1, 2004 11:34 AM
Reply #47 Sunday, February 1, 2004 11:34 AM
I think I just topped the record for receiving spam mail. When I logged in this morning I had 22 thousand 4 hundred and 86 spam messages in my inbox. Had to phone my server to delete them. 
grayhaze
Reply #48 Sunday, February 1, 2004 12:03 PM
Reply #48 Sunday, February 1, 2004 12:03 PM
22 THOUSAND?! You've been mailbombed my friend. 
craeonics
Reply #49 Sunday, February 1, 2004 12:23 PM
Reply #49 Sunday, February 1, 2004 12:23 PM
craeonics can't come to the phone right now: some virus made him wipe out his drive, so he has to fix that
DesignCaddy
Reply #50 Monday, February 2, 2004 9:13 AM
Reply #50 Monday, February 2, 2004 9:13 AM
i had to dig for this thread. thought i'd bring it back with a bit of cutionary info. i'm norton-religious, but i sat down at my desk this morning to find an email in my box generated from an 'anti-virus administrator' saying a message attempting to be sent from my personal email addie (which comes through this box as well as my groupwise work addie) had been blocked because of a virus called Worm.SCO.A , in an email called 'test' that was going to some guy @gettaphone.com . i heard SCO got hit pretty hard this weekend from MYDOOM. anyway, this was DISPITE A FULL SYSTEM SCAN run on friday night that turned up nothing. so i updated and i'm scanning now but this thing made it through my corporate nets and then my own net (i'm the only one here who uses updated anti-virus software). so keep your eyes open, fellas. i'll let you know what my fullscan turns up. i'm also curious if this looks like clever ruse. it says it comes from 'system anti-virus administrator . and host-rocket is just some domain retailer. until my IT guys come in to verify this is a domain they recognize, anyone have any insight?
Attention: ### @mverzella.com
A virus was found in an Email message you sent.
The Email Scanner intercepted it and stopped the entire message
from reaching its destination.
The virus was reported to be:
Worm.SCO.A
Please update your virus scanner/signatures or contact your local
IT support personnel as soon as possible. As you may have a virus
or a Trojan program installed on your system. For any questions
regarding the virus policies of this network, please contact
HostRocket.com Support Personnel. Support may be contacted via
Email at support.com or through the support website
located at http://www.rocketsupport.com.
Your message was sent with the following envelope:
MAIL FROM: ### @mverzella.com
RCPT TO: ### @gettaphone.com
... and with the following headers:
---
MAILFROM: ### @mverzella.com
Received: from pcp01640074pcs.rocsth01.mi.comcast.net (HELO mverzella.com) (##.##.###.###)
by mx3.hrnoc.net with SMTP; 1 Feb 2004 23:11:14 -0000
From: ### @mverzella.com
To: ### @gettaphone.com
Subject: Test
Date: Sun, 1 Feb 2004 18:11:33 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_5A2E6264.07AD1DE8"
X-Priority: 3
X-MSMail-Priority: Normal
---
Attention: ### @mverzella.com
A virus was found in an Email message you sent.
The Email Scanner intercepted it and stopped the entire message
from reaching its destination.
The virus was reported to be:
Worm.SCO.A
Please update your virus scanner/signatures or contact your local
IT support personnel as soon as possible. As you may have a virus
or a Trojan program installed on your system. For any questions
regarding the virus policies of this network, please contact
HostRocket.com Support Personnel. Support may be contacted via
Email at support.com or through the support website
located at http://www.rocketsupport.com.
Your message was sent with the following envelope:
MAIL FROM: ### @mverzella.com
RCPT TO: ### @gettaphone.com
... and with the following headers:
---
MAILFROM: ### @mverzella.com
Received: from pcp01640074pcs.rocsth01.mi.comcast.net (HELO mverzella.com) (##.##.###.###)
by mx3.hrnoc.net with SMTP; 1 Feb 2004 23:11:14 -0000
From: ### @mverzella.com
To: ### @gettaphone.com
Subject: Test
Date: Sun, 1 Feb 2004 18:11:33 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_5A2E6264.07AD1DE8"
X-Priority: 3
X-MSMail-Priority: Normal
---
DesignCaddy
Reply #51 Monday, February 2, 2004 9:43 AM
Reply #51 Monday, February 2, 2004 9:43 AM
update.. IT guys at work say its possible this slipped through someone's nets a week ago and circulated around an exchange server, but that its most likely a hoax. my second scan turned up nothing so i'm ok.
HG_Eliminator
Reply #52 Monday, February 2, 2004 9:54 AM
Reply #52 Monday, February 2, 2004 9:54 AM
i think more than any thing. fear is the biggest part of the recent virus upriseing. some gumbys will try to cash in on this fear. the best anyone can do is keep their antivirus updated and grin and bear it. keep every thing backed up, and relax. the biggest thing ive read that motivates virus makers is the panick they create (it gives them the illusion of power)..
[Message Edited]
[Message Edited]
DesignCaddy
Reply #53 Monday, February 2, 2004 10:37 AM
Reply #53 Monday, February 2, 2004 10:37 AM
hehheh.. i picture the norton guy standing on a mountain of monitors yelling 'i have the power!!!'
HG_Eliminator
Reply #54 Monday, February 2, 2004 10:44 AM
Reply #54 Monday, February 2, 2004 10:44 AM
hehehe caddy u are 1 sik puppy...no wonder i like u 
heres a link to an easy test for the mydoom viruses, and some help on how to deal with them.. http://www.microsoft.com/security/antivirus/mydoom.asp
[Message Edited]
heres a link to an easy test for the mydoom viruses, and some help on how to deal with them.. http://www.microsoft.com/security/antivirus/mydoom.asp
[Message Edited]
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 3 of 3 | |
|
|---|
Reply #41 Saturday, January 31, 2004 5:32 AM