PDA

View Full Version : WHAT THE FUCK !


1
11-18-2001, 10:10 PM
I am getting this mail everyday..
i think that somebody sends me virus..
i am usign pop mail with Eudora.. how can i filter this fucking mails.

Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: message text


Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks


inq1-2.doc.bat

lock
11-18-2001, 11:09 PM
Your pc may be infected. If you have been receiving emails with attachments that contain random subjects
and random file names, that contains the following text.

Hi! How are you?
See you later. Thanks

Between these two sentences there may be other text, you may have the virus
on your pc that may delete your c: on October 16 of any year.

I sent you this file in
order to seek your opinion

The virus if infected it may slow your server and/or email client completely
by bombarding it with hundreds of emails containing the infected attachments.

There is a program that will kill the virus wich is available below along with further information. http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

"Magistrate"

Win32.Magistr.24876 is a polymorphic binary virus/worm targeting Windows
95/98/ME/2000 systems. We are currently seeing a copy of this virus each
day.

When run, this virus will make a copy of an EXE or SCR file in the system
directory, give it a slightly different name and infect the copy. The virus
then adds a reference to this infected file to the system registry.

On the next reboot, the infected copy will infect other .EXE and .SCR files
in the System directory and its subdirectories.

The virus searches for e-mail addresses in Outlook Express and Netscape
mailboxes, as well as the Windows address book (.WAB) files. It stores
information about the location of these mailboxes in a hidden file in the
Windows directory with the extension ".dat". The rest of the filename is
randomly generated based on the computer name.

Using its own SMTP code (by connecting to the mailserver directly), the
virus then sends an e-mail message to all of the addresses it has found. The
subject and body of the e-mail are taken from files on the infected
machine's hard drive, and therefore may be any collection of ASCII
characters. An infected file is attached to the e-mail.

"SirCam"

This virus will infect most systems operating under windows. It can infect
either via the email or across computer network drives. We are seeing this
one at least once per day.

Win32.SirCam.137216 is an e-mail worm which sends itself as well as clean
documents from an infected machine. The worm arrives in a message which may
be either English or Spanish. The English message normally appears like
this:

Hi! How are you?
I send you this file in order to have your advice
See you later. Thanks

The attachment name is variable, but will have a double extension, for
example "SCRIPT.DOC.PIF". The actual extension may be "PIF", "LNK", "BAT",
"EXE" or "COM". The subject of the message matches the attachment name,
except without the extensions. In the above example the subject would be
"SCRIPT".

The danger of this virus is that it could send your confidential information
to any number of other parties in your address book.

I copied and saved this info from one of the webmaster resources sites as i see a lot of viruses and thought might be useful well thought id pass it on.

kittykat69
11-18-2001, 11:19 PM
That sounds exactly like the subject line that was used for Nimda virus/worm

Definately do what lock suggests
and make sure that you contact people in your address book and tell them that it is going around - it spreads itself via address books.