PDA

View Full Version : These EMAILS ARE PISSING ME OFF!!!!!!!!!!


'Plat
07-20-2001, 12:10 PM
I AM SICK AND TIRED OF THESE EMAILS!!!

UGH! UGH! GRRRRRRR!

I wake up this morning and have 50! YES 50! of this stupid virus in my mail.

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks


Hola como estas ?

Te mando este archivo para que me des tu punto de vista

Nos vemos pronto, gracias.

GRRRRRRRRRR AHHHHHHHHHHHHH GRRRRRRRRRRRRR!

If having 10 yesterday wasnt enough.. now 50 i cant believe this.

All with different subjects too.

Much0S
07-20-2001, 12:14 PM
50!? I GET 1 PER MINUTE!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

In 5 different languages so far... each time I check my mail (which is once every 5 minutes) there are at least 4 bogus messages!!

Fuck this!

Simon
07-20-2001, 12:19 PM
You guys are not the only one... This is a worm going around the net... the past 3-4 days it has crashed over 2 million pcs...
difinately a bugger..

We'r working on something , a modification to sendmail to block this. When we come to a solution i'll post the solution here so you all can perform it on your servers and hopefully stop this problem.

stepin
07-20-2001, 12:22 PM
i agree with you both i have been bombed with the dam viruses in doc and pif format. i get about 5 a day from other guys <font face="Verdana, Arial" size="2">Originally posted by Simon:
You guys are not the only one... This is a worm going around the net... the past 3-4 days it has crashed over 2 million pcs...
difinately a bugger..

We'r working on something , a modification to sendmail to block this. When we come to a solution i'll post the solution here so you all can perform it on your servers and hopefully stop this problem.</font>

Shannon
07-20-2001, 12:25 PM
Simon - Your going to be working a long ass time, cause it comes with it's own SMTP engine...

If you check out Norton's it tells you all the text that come's inside the body of the e-mail's. Just set it up through Outlook to where anyhting with that text goes to the Recycle Bin...

William
07-20-2001, 12:57 PM
I got this e-mail too. First time, 5 minutes ago.

Toni
07-20-2001, 01:02 PM
I've received about 100 of these today!!!

Due
07-20-2001, 01:10 PM
If anyone is using a TRUE E-mail client the just set Outlook Expres to auto delete files from server that contain "I send you this file in order to have your advice" in the mail body. Add any other languages that you might receive in it also http://bbs.adultwebmasterinfo.com/ubb/wink.gif

mukoh
07-20-2001, 01:10 PM
I woke up this morning and i had 45 of these, not counting the other spam i have.

NakedPanda
07-20-2001, 01:18 PM
I have a very simple way of making sure I never get virusus I just never check my emails or open unsolicited ones everything else gets deleted the 1 time a week I check.
Try it you will live longer

Panda

stepin
07-20-2001, 01:37 PM
this is good but the one i am talkin about comes from people you know when they get it it sends it self to everyone on there address book. so you open it thinking its kool and then you got it that is how i got it awhile back now i just delete everything with .pif or doc attachment <font face="Verdana, Arial" size="2">Originally posted by NakedPanda:
I have a very simple way of making sure I never get virusus I just never check my emails or open unsolicited ones everything else gets deleted the 1 time a week I check.
Try it you will live longer

Panda</font>

RaiDeN
07-20-2001, 02:27 PM
yeah this thig is spreading like reaaaaal fast.

i get 50+ a day. but i managed to make a rule for most of 'em. so they dont annoy anymore.

btws 90% of the ones i got were in spanish or such a similar language

mukoh
07-20-2001, 03:22 PM
I am getting like 10 an hour now, from like 5 different senders. This is lame

Venturas
07-20-2001, 03:24 PM
Only got 2 of them http://bbs.adultwebmasterinfo.com/ubb/smile.gif (guess my contacts aren't as stupid as I thougth lol)

'Plat
07-20-2001, 03:32 PM
i had no clue about setting "rules" thanks for bringing that up. I inserted a rule for "Hola como estas?" the first line in half of the virus emails ive gotten, the other are in english.

Seems to be working :c)
thx again

Tipsy
07-20-2001, 05:22 PM
Yippeeee.
38 in the past 3 hours. Wow - this one's spreading quick. You gotta love the ignorance of people who open these despite warnings just about everywhere http://bbs.adultwebmasterinfo.com/ubb/smile.gif

toker
07-20-2001, 05:59 PM
Yea and just wait till them bandwidth bills roll in for all these files being transfered 50 times a day!!

BTW i got a new string file.xls.pif which has jumped in size now its 2.14mb aint that great..

If you dont learn to set some filtering rules in your servers and client software then you lookin at some heavy damage.

50 x 2.14mb x 7 x 12 = $$$

shane94
07-20-2001, 09:47 PM
(((((((((((((((((( McAfee.com Dispatch )))))))))))))))))))))


------------------------------------------------------------
**VIRUS ALERT - W32/SirCam@MM (Sir Cam Virus)**
------------------------------------------------------------

[This message is brought to you as a subscriber to the
McAfee.com Dispatch. To unsubscribe, please follow the
instructions at the bottom of the page.]


McAfee.com has seen a large and growing number of consumer
computers infected with W32/SirCam@MM. This is a HIGH RISK
VIRUS FOR CONSUMERS. The infected email can come from
addresses that you recognize. Attached is a file with two
different extensions. The file name itself varies.


The email message can appear as follows:

Subject: [filename (random)]
Body: [content varies]

Hi! How are you?
I send you this file in order to have your advice
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
See you later. Thanks

--- the same message may be received in Spanish ---

Hola como estas ?
Te mando este archivo para que me des tu punto de vista
or Espero me puedas ayudar con el archivo que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que me pediste
Nos vemos pronto, gracias.


The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG,
.PDF, .PNG, .PS, and .ZIP files in the MY DOCUMENTS folder
and attempts to send copies of these documents to email
recipients found in the Windows Address Book and addresses
found in cached files.

For detection and removal instructions for the Sir Cam Virus,
&lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371"&gt; click here&lt;/a&gt;.

McAfee.com VirusScan Online and Clinic subscribers:
If you don't have ActiveShield installed and updated, you
are not protected from this virus. &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2372"&gt; Click here&lt;/a&gt; to download ActiveShield.

Retail VirusScan Users:
Version 4.0.70 and above with DAT file 4148 will detect and
remove this virus. To download the latest DAT files,
&lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2253"&gt; click here&lt;/a&gt;.


________________________Virus Fixes_________________________

Find out more about this virus. &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371"&gt; Click here&lt;/a&gt; to go to the
W32/SirCam@mm Help Center.

Become a McAfee.com subscriber and check your system online.
&lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2377"&gt; Click here&lt;/a&gt;.

Buy the latest VirusScan in the McAfee Store! &lt;a href="http://mcafeestore.beyond.com/AF77887-VS_700/Product/0,1057,3-18-SN101924,00.html"&gt; Click here&lt;/a&gt;.

Is your VirusScan current? Purchase the VS Maintenance Plan
for $22.45 (USD) and upgrade to the most current version.
&lt;a href="http://mcafeestore.beyond.com/AF77887-SMP_400/Product/0,1057,3-18-SN102899,00.html"&gt; Click here&lt;/a&gt;.

Download the latest DAT files, &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2253"&gt; click here&lt;/a&gt;.


_____________________Anti-Virus Tips!_______________________

Find out how to detect and prevent viruses with these handy
tips. &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1589"&gt; Click here&lt;/a&gt;.


______________________Special Offers_________________________

SAVE UP TO 33% on security for your computer AND get 20 hot
songs from MP3.com. &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2366"&gt; Click here&lt;/a&gt;.

Get a 2-year subscription of VirusScan Online now only
$39.90 (USD)! SAVE $10! &lt;a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2367"&gt; Click here&lt;/a&gt;.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~

[ You are currently subscribed as: putershop@aol.com ]

McAfee.com Support: To contact us about this dispatch, &lt;a href="http://www.mcafee.com/support/cust_serv/default.asp"&gt; click here&lt;/a&gt;.

Subscribe: If you received this message from a friend and
would like to subscribe to McAfee.com Dispatch, &lt;a href="http://dispatch.mcafee.com/sub.asp?s=22"&gt; click here&lt;/a&gt;.

Unsubscribe: If you do not wish to receive email, click here. &lt;a href="http://dispatch.mcafee.com/unsub.asp"&gt; click here&lt;/a&gt;.

Note: Promotions are subject to change without notice.

&lt;a href="http://dispatch.mcafee.com/permission_policy.asp"&gt; Click here&lt;/a&gt; to view our permission policy.

Trademarks 2001 McAfee.com Corporation / All Rights Reserved.

Dialer Dealer
07-21-2001, 09:32 AM
<font face="Verdana, Arial" size="2">Originally posted by Due:
If anyone is using a TRUE E-mail client the just set Outlook Expres to auto delete files from server that contain "I send you this file in order to have your advice" in the mail body. Add any other languages that you might receive in it also http://bbs.adultwebmasterinfo.com/ubb/wink.gif</font>

i get over 300 of them daily.

I configured my Outlook 6 exactly this way but it doesnt work http://bbs.adultwebmasterinfo.com/ubb/frown.gif

any idea why ?

right now I'm blocking all emails above 200 KB to get rid of 90% of them.

Bill-
07-21-2001, 11:13 AM
it's sucks bigtime. i get it 10 times a day.

boneprone
07-21-2001, 02:58 PM
It sucks cause legit email I want to get isnt coming in because this virus email crashes my email.. My storage space is overloaded. I have to go and delete every email every 6 hours or my box gets locekd up full pass capicity and shuts me down.

'Plat
07-21-2001, 03:17 PM
when is this virus gonna end? its just going to get worse and worse. I have to empty mine every 30mins because i get over 20 of them in that amount of time. This is not good at all. If deactivating my email system is the only way then hell let it be.

WETDOG
07-22-2001, 09:03 PM
Well i have been off line a bit and checked my 3 e-mail accounts i have over 200 of these bullshit e-mails asking for my advice and some other guy is now sending them in text file format with .bat .exe scripting.

Is there any way to track these ass holes and e-mail bomb them to death???

blind
07-22-2001, 11:09 PM
It is to my understanding, that it is people you've emailed before that you were put int he address book that are sending you this shit. The virus must have something where it sends itself out multiple times a day, because I get 5 or 10 at a time from the same people when I check my mail.

My advice:
Reply to the messages and tell the sender they have a virus on their computer and to fix it. I'm pretty suprised that this hasn't showed up on CNN yet. In my opinion, this thing is substancially larger, and more "damaging" than Mellisa ever was.
In fact, I never got the Mellisa virus, but I have recieved over 4,500 of these things in the past few weeks, and it gets worse every day because it spreads itself every day. People who open these attachments should be shot for being dumbasses.

~Jeff

Aquaman
07-23-2001, 12:19 AM
http://www.cnn.com/2001/TECH/internet/07/20/computer.viruses/index.html

'Plat
07-23-2001, 01:45 AM
Ok i got an email downloading now that has been downloading for the past 5mins.. how big does this virus get? Does it just accumulate every file in the persons My Documents and send everything!?

grr i really really am starting to grr

'Plat
07-23-2001, 01:54 AM
Ok that one email just finished (1 out of 35 more)

Its 39848kb in size and subject is "fo-psp702f"

That means FOSI PaintShop Pro 7.02F

Im sure u may have heard of FOSI (warez group) So yes this virus must take everything in the users My Documents and send it out. 39mb holy crap this is not good. Are they only going to get bigger!? Imagine someone with like 1gb+ in their My Documents!!! ick bad stuff bad stuff

Avatar
07-23-2001, 09:05 AM
Set your filter to delete email containing doc.zl and/or if you use Eudora you can delete the email on the mailserver.

Make an auto reply on that filter as well warning people that they have virus on their comp. and include a link to eg. mcaffe!

blind
07-23-2001, 12:03 PM
It's about time the bigger guys release this "breaking" news...

** ALERT **

A new virus is spreading in the wild....It can be recognized by the following characteristics:

Subject Line: Random subject line with the same name as the attachment.

Message body: (The body could be either in Spanish or English)

Hi! How are you?

I send you this file in order to have your advice OR I hope you can help me with this file that I send OR I hope you like the file that I send you OR This is the file with the information that you ask for

See you later. Thanks

Attachment: (random filename, with the same name as the subject line)


** MORE VIRUS DETAILS **

Virus Name: Troj_Sircam.A

Virus Description:

This worm propagates via email using SMTP commands. It sends copies of itself to all addresses listed in an infected user's address book. It arrives in an email with a random subject line, and an attachment by the same name.
Risk Rating: Medium

Virus Type: Trojan

Destructive: Y


** ACTIONS REQUIRED **

The following prudent actions are required by all employees:
Ensure your virus software engine and pattern files are up to date; this virus is detected by:
Trend Pattern File #917 and
Trend Scan Engine v5.170
Ensure you don't open any suspicious email messages. If in any doubt, delete the message.
If applicable, ensure your Windows Scripting Host application is de-activated.
Check with your local IS Specialist if you have any concerns regarding this. In addition to these steps, the Corporate e-Mail gateway has been configured to block any messages from the Internet that have this virus' characteristics.

blind
07-23-2001, 12:07 PM
It's about time the bigger guys release this "breaking" news...

** ALERT **

A new virus is spreading in the wild....It can be recognized by the following characteristics:

Subject Line: Random subject line with the same name as the attachment.

Message body: (The body could be either in Spanish or English)

Hi! How are you?

I send you this file in order to have your advice OR I hope you can help me with this file that I send OR I hope you like the file that I send you OR This is the file with the information that you ask for

See you later. Thanks

Attachment: (random filename, with the same name as the subject line)


** MORE VIRUS DETAILS **

Virus Name: Troj_Sircam.A

Virus Description:

This worm propagates via email using SMTP commands. It sends copies of itself to all addresses listed in an infected user's address book. It arrives in an email with a random subject line, and an attachment by the same name.
Risk Rating: Medium

Virus Type: Trojan

Destructive: Y


** ACTIONS REQUIRED **

The following prudent actions are required by all employees:
Ensure your virus software engine and pattern files are up to date; this virus is detected by:
Trend Pattern File #917 and
Trend Scan Engine v5.170
Ensure you don't open any suspicious email messages. If in any doubt, delete the message.
If applicable, ensure your Windows Scripting Host application is de-activated.
Check with your local IS Specialist if you have any concerns regarding this. In addition to these steps, the Corporate e-Mail gateway has been configured to block any messages from the Internet that have this virus' characteristics.

Doctor Dre
07-23-2001, 12:27 PM
I got over 200 in the past day ... fucking annoying crap

Wetlap
07-23-2001, 05:07 PM
another solution
delete the contact list
http://bbs.adultwebmasterinfo.com/ubb/smile.gif
http://bbs.adultwebmasterinfo.com/ubb/frown.gif

enlighter
07-24-2001, 09:17 AM
"deleting your contactlist" ...

why should this solve anything? I receive my emails no matter from whom they are coming !?

Carneal
07-24-2001, 01:35 PM
thats why outlook express blows.. if we all would just stick to a html based email like hotmail.com we wouldnt be bitching http://bbs.adultwebmasterinfo.com/ubb/smile.gif

i also get these bumfuck emails about 100 a day... i think personally its kind of dumb to make something just to go back and forth over millions of cpus all the time. theres no purpose in these dumb worms,,, ahwell life sucks... have a good day http://bbs.adultwebmasterinfo.com/ubb/smile.gif