*WARNING* Virus alert on Loafdom mailing list. - Page 2

Deb · 03 Mar 2004, 19:53

i cant check mine cause its been deleted, unless someone knows how i can get the info back. I think bigmomma has hers though,

I;ve had 100's of virus's sent to me lately luckily nortons found them. Even had emails from people saying i'd sent them virus's but I hadnt, so someones also hijacked my email addy. Clever little so and so's these virus's

Deb

shadow1000001 · 04 Mar 2004, 00:52

I know what you mean Deb.
I have been hit repeatedly over the last week or two and I even got one the other day stating that the e-mail address I sent an e-mail to wasn't valid and I don't even know that address.

Maria

Guppie · 04 Mar 2004, 01:43

Quote:

Originally Posted by R.

This one was sent from a computer called "toshiba-user" in Australia.
Does that sound familiar to someone?

Can't check this, deleted the mail. The attachment was deleted by Norton virus scanner. Warning was: w32.beagle@amm detected and deleted. Mine was supposed to look like it came MOTS.
Thank God for an updated virus-scanner.

Bigmomma · 04 Mar 2004, 02:10

well this is big momma, not the hubby as before.
i will put this as nicely as i possibly can.
1) when jp told me their was this virus and to post the info on forum, i said no, didn't want the agro, i said tell the moderator, they will post about it.
2) jp only wanted to warn people about this to save people time upset and work, ie incase of damage to computer, he did not want to go causing trouble or things like that.
3)my nice calm, placid hubby is now totally fed up with trying to explain, as he said all they want to do is cause arguements and i have not the time for that.
4) when i asked him to post the reply about the header, his reply was, why bother, you could give all the details from here to kingdom come and most would still tell you, your wrong, even with everything staring them in their face.
now for the past few months i have peeked back in every so often to see if things are calm or stormy, and well more often than not i have needed an all weather mac to venture in here.
but this has just proved it too me all to clearly, we really did not need this tripe today, we are moving house in a few days and with six kids that is a really big job, i really wish i had told him not to bother i really do.

Guppie · 04 Mar 2004, 02:47

You're moving and have six kids? OMG... you have my sympathy, girl...

As for the worms: The trojans get smarter and smarter. They can mail themselves to every person in your adressbook (outlook) and even get email-adresses from your "my documents"environment. Just like the spambots get smarter and can get email-addy's out of forwarded mails...

Don't blame the "supposed" sender. Blame the creator of the virusses...

I myself never ever open an attachment sent through mail, unless it's a person I know and trust and he/se says in the mail it's ok to open.... I also keep my scanner updated, it auto-updates when a new .dat file is available.

But I also never blame a person if he/she gets infected and I get a mail with a worm-attachment in it.

I once was a newbe on the internet. Didn't know shit, he he... managed to infect 3 egroups with the happy99.exe worm

Alanis Morrisette quote: "you live, you learn..."

Guppie · 04 Mar 2004, 02:52

Quote:

Originally Posted by Bigmomma

2) jp only wanted to warn people about this to save people time upset and work, ie incase of damage to computer, he did not want to go causing trouble or things like that..

And I for one am glad he took the trouble to warn people. So thanks, jp

Winston · 04 Mar 2004, 03:10

i think bigpoppa was spot on in doing what he did aswell :P

Wezzie · 04 Mar 2004, 04:33

Just wanted to Thank Bigmommas HUBBY !!!! I thought you did a superb job explaining this worm thingy. I tried but as I told ya'll when it come to this worm stuff (or did I say computers?

) I'm not the brightest light bulb in the house.
Bigmommas hubby, again thank you, I understood everything you wrote, even better than what my ISP server told me.
Wezzie

Bigmomma · 04 Mar 2004, 09:45

thanks for that, i will tell him, it will put the smile back on his face.
he is used to putting things the way people can understand when it comes to computers as he has me for a wife, when he starts going on about these things my eyes start to glaze over, and i lose the power of speech

well now you probably wont see us till the end of next week, good luck to all, and i will keep my fingers crossed that everyone is still here when i come back, and just maybe, some of the old crowd may have returned,well i can dream cant i

take care,
kezzina

Deb · 04 Mar 2004, 10:47

Quote:

Originally Posted by Bigmomma

thanks for that, i will tell him, it will put the smile back on his face.
he is used to putting things the way people can understand when it comes to computers as he has me for a wife, when he starts going on about these things my eyes start to glaze over, and i lose the power of speech

well now you probably wont see us till the end of next week, good luck to all, and i will keep my fingers crossed that everyone is still here when i come back, and just maybe, some of the old crowd may have returned,well i can dream cant i

take care,
kezzina

Yep i'm greatful to him as well :) he explained things very good.

Hope the move goes well. hopefully it'll mean you'll have more room after lol, I know how that feels

Deb

Caz · 04 Mar 2004, 12:33

Hi all, not sure if this is going in right place or not, but sure one of the Mods will move if it's wrong.

Just a warning ... be extremely careful at the moment when opening your email. So far, I have had about 10 virused emails in Outlook Express, and joy of joy found one of the little darlings in Hotmail last night. Thankfully Nortons picked up the Outlook ones and Hotmail wouldn't let me open the supposed attachment. Last nights one was titled Re: Excel File.

I know you are all probably so well versed in avoiding viruses lol but can I just say Please do not open any email from anyone you don't know, or any that look even the slightest bit dodgy.

A great site for double checking your computer is www.housecall.com it lets you d/l a scan type thing, which doesn't conflict with Nortons or anything, plus you can also sign up for a weekly email which gives you warning of any viruses going around that you possibly haven't heard about.

R. · 04 Mar 2004, 19:28

It's not over yet: http://news.com.com/2100-7355_3-5169...l?tag=nefd_top

Deb · 04 Mar 2004, 20:59

Quote:

Originally Posted by R.

It's not over yet: http://news.com.com/2100-7355_3-5169...l?tag=nefd_top

R or someone, could you put that into english for me

My brains not taking anything in at the moment

Deb

*AndyK* · 04 Mar 2004, 21:38

Basically it's sayiong that the lowlife who write these viruses are slagging each other off in the virus code, with each variant of a particular virus containing a taunt or a reply to that contained in a previous variant of a different virus.

Bottom line is that we can expect these viruses to continue being setn round the net while the lowlife continue to fight

Deb · 04 Mar 2004, 22:03

wonderful

I got some the other day that had 2 virus's in each mail!!!

Deb

Caz · 04 Mar 2004, 23:17

Just found No. 2 in my Hotmail account with the subject header 'your body is sexy in your pic'

they obviously haven't seen my body lol

A lot of the virused emails going around seem to have different headers as the subjects so it's hard to tell. Plus, the email addies they are supposed to have come from appear to be genuine addies.

Sometimes I wish hackers would put their talents to good use, like getting me £1,000,000 then I wouldn't have to work lol

Deb · 04 Mar 2004, 23:58

Just got another

This one reckons its from wezzie at oifc

Says i'm naked lolololol..

Return-Path: <edited@meatloaf-oifc.com>
Received: from ntlworld.com ([80.1.32.65]) by mta05-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP
id <20040304215044.SQIH27661.mta05-svc.ntlworld.com@ntlworld.com>
for <edited@ntlworld.com>; Thu, 4 Mar 2004 21:50:44 +0000
From: edited@meatloaf-oifc.com
To: edited@ntlworld.com
Subject: Re: <5664ddff?$??§2>
Date: Thu, 4 Mar 2004 21:51:50 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0013_000031D9.00002B01"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <20040304215044.SQIH27661.mta05-svc.ntlworld.com@ntlworld.com>

This is a multi-part message in MIME format.

------=_NextPart_000_0013_000031D9.00002B01
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

your are naked?

------=_NextPart_000_0013_000031D9.00002B01
Content-Type: plain/text;
name="Norton AntiVirus Deleted1.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Norton AntiVirus Deleted1.txt"

Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW50OiB1bmZvbGRzLnBpZi 4N
ClRoZSBhdHRhY2htZW50IHdhcyBpbmZlY3RlZCB3aXRoIHRoZSBXMzIuTmV0c2t5LkNAbW 0g
dmlydXMu
------=_NextPart_000_0013_000031D9.00002B01--

that make any sense to anyone?

Deb

R. · 05 Mar 2004, 00:11

FYI: I have edited the email addies in above post for privacy and security reasons.

Caz · 05 Mar 2004, 00:12

See what I mean about the subject headers. They must think we came down in the last shower ..... well so far we know three of the subject headers NOT to open lol .....

Maybe we should start a new topic with the subject: Virus Email Headers lol

Deb · 05 Mar 2004, 00:46

Quote:

Originally Posted by R.

FYI: I have edited the email addies in above post for privacy and security reasons.

Ahh thanx R :)

does that header say where it came from?

Wezzie · 05 Mar 2004, 06:45

sultonfan,
I assure you I have never seen you naked !

I also hope you know I didn't send that to you, but at least you haven't got one from yourself yet !!

Wanted to add something to Caz's post, unless you have a virus program and (thanks to David's suggestion) update it every day DON'T OPEN ANY ATTACHMENT !! It doesn't matter if you know the sender or not, as you saw sultonfan got something from whom she thought was me. This virus is I think the worst yet. Thanks for the link R.
Wezzie

Lady B · 05 Mar 2004, 07:11

Quote:

Originally Posted by R.

Additionally a warning:
There are variants of the W32/Bagle worms on the loose.
I received an email from management@mlukfc.com notifying me about my email account utilization.
This is a fake email address and the email is not coming from mlukfc.com.

Code:

Subject: Notify about your e-mail account utilization.

Dear user,  the management of Mlukfc.com  mailing  system wants to let you know  that,

Some of  our clients complained about the  spam (negative e-mail  content)
outgoing from  your e-mail account. Probably, you have been infected by
a  proxy-relay trojan server.  In order to keep your computer safe,
follow the  instructions.

For details see the  attached file.

Cheers,
   The Mlukfc.com  team                                  http://www.mlukfc.com

Thank you so much for posting this!!! I have my own domain and got 2 emails from "management" and "no reply" with my domain name, virus attached!!! If I hadn't seen your message I very well might have opened it. It was almost word for word to what you received.

Thanks a million again R!

Lady B

Deb · 05 Mar 2004, 11:46

Quote:

Originally Posted by Wezzie

sultonfan,
I assure you I have never seen you naked !

I also hope you know I didn't send that to you, but at least you haven't got one from yourself yet !!

Wanted to add something to Caz's post, unless you have a virus program and (thanks to David's suggestion) update it every day DON'T OPEN ANY ATTACHMENT !! It doesn't matter if you know the sender or not, as you saw sultonfan got something from whom she thought was me. This virus is I think the worst yet. Thanks for the link R.
Wezzie

Phew glad about that Wezzie thought someone ahd been sending them baby pix around

No of course i knew you hadnt sent me a virus lol ,was just saying where it was saying it was from.

Deb

R. · 08 Mar 2004, 19:53

FYI, there's another variant of the Sober worm active right now.
This one arrives as a security patch from Microsoft.

More info here: http://vil.nai.com/vil/content/v_101081.htm

04 Mar 2004, 12:33	#36
Caz Super Loafer Join Date: 27.01.2004 Location: Dechmont, West Lothian, Scotland Posts: 900	Computer Virus Hi all, not sure if this is going in right place or not, but sure one of the Mods will move if it's wrong. Just a warning ... be extremely careful at the moment when opening your email. So far, I have had about 10 virused emails in Outlook Express, and joy of joy found one of the little darlings in Hotmail last night. Thankfully Nortons picked up the Outlook ones and Hotmail wouldn't let me open the supposed attachment. Last nights one was titled Re: Excel File. I know you are all probably so well versed in avoiding viruses lol but can I just say Please do not open any email from anyone you don't know, or any that look even the slightest bit dodgy. A great site for double checking your computer is www.housecall.com it lets you d/l a scan type thing, which doesn't conflict with Nortons or anything, plus you can also sign up for a weekly email which gives you warning of any viruses going around that you possibly haven't heard about.

03 Mar 2004, 19:53	#26
Deb Mega Loafer Join Date: 26.04.2003 Location: Did I say that?... Posts: 4,162	i cant check mine cause its been deleted, unless someone knows how i can get the info back. I think bigmomma has hers though, I;ve had 100's of virus's sent to me lately luckily nortons found them. Even had emails from people saying i'd sent them virus's but I hadnt, so someones also hijacked my email addy. Clever little so and so's these virus's Deb

04 Mar 2004, 00:52	#27
shadow1000001 Mega Loafer Join Date: 10.07.2003 Location: Red Deer, Alberta, Canada Posts: 2,580	I know what you mean Deb. I have been hit repeatedly over the last week or two and I even got one the other day stating that the e-mail address I sent an e-mail to wasn't valid and I don't even know that address. Maria

04 Mar 2004, 02:10	#29
Bigmomma Super Loafer Join Date: 07.07.2003 Location: Somewhere in time in my mind......... Posts: 655	well this is big momma, not the hubby as before. i will put this as nicely as i possibly can. 1) when jp told me their was this virus and to post the info on forum, i said no, didn't want the agro, i said tell the moderator, they will post about it. 2) jp only wanted to warn people about this to save people time upset and work, ie incase of damage to computer, he did not want to go causing trouble or things like that. 3)my nice calm, placid hubby is now totally fed up with trying to explain, as he said all they want to do is cause arguements and i have not the time for that. 4) when i asked him to post the reply about the header, his reply was, why bother, you could give all the details from here to kingdom come and most would still tell you, your wrong, even with everything staring them in their face. now for the past few months i have peeked back in every so often to see if things are calm or stormy, and well more often than not i have needed an all weather mac to venture in here. but this has just proved it too me all to clearly, we really did not need this tripe today, we are moving house in a few days and with six kids that is a really big job, i really wish i had told him not to bother i really do.

04 Mar 2004, 02:47	#30
Guppie www.meat-loaf.nl Join Date: 28.12.2002 Location: Brabant, The Netherlands Posts: 1,300	You're moving and have six kids? OMG... you have my sympathy, girl... As for the worms: The trojans get smarter and smarter. They can mail themselves to every person in your adressbook (outlook) and even get email-adresses from your "my documents"environment. Just like the spambots get smarter and can get email-addy's out of forwarded mails... Don't blame the "supposed" sender. Blame the creator of the virusses... I myself never ever open an attachment sent through mail, unless it's a person I know and trust and he/se says in the mail it's ok to open.... I also keep my scanner updated, it auto-updates when a new .dat file is available. But I also never blame a person if he/she gets infected and I get a mail with a worm-attachment in it. I once was a newbe on the internet. Didn't know shit, he he... managed to infect 3 egroups with the happy99.exe worm Alanis Morrisette quote: "you live, you learn..."

04 Mar 2004, 03:10	#32
Winston Super Loafer Join Date: 02.04.2003 Location: Lion's Den Posts: 745	i think bigpoppa was spot on in doing what he did aswell :P

04 Mar 2004, 04:33	#33
Wezzie Rookie Join Date: 07.02.2003 Posts: 20	Just wanted to Thank Bigmommas HUBBY !!!! I thought you did a superb job explaining this worm thingy. I tried but as I told ya'll when it come to this worm stuff (or did I say computers? ) I'm not the brightest light bulb in the house. Bigmommas hubby, again thank you, I understood everything you wrote, even better than what my ISP server told me. Wezzie

04 Mar 2004, 09:45	#34
Bigmomma Super Loafer Join Date: 07.07.2003 Location: Somewhere in time in my mind......... Posts: 655	thanks for that, i will tell him, it will put the smile back on his face. he is used to putting things the way people can understand when it comes to computers as he has me for a wife, when he starts going on about these things my eyes start to glaze over, and i lose the power of speech well now you probably wont see us till the end of next week, good luck to all, and i will keep my fingers crossed that everyone is still here when i come back, and just maybe, some of the old crowd may have returned,well i can dream cant i take care, kezzina

04 Mar 2004, 19:28	#37
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	It's not over yet: http://news.com.com/2100-7355_3-5169...l?tag=nefd_top

04 Mar 2004, 21:38	#39
AndyK Relentless Join Date: 21.11.2003 Location: Over the top..... seeing what's on the other side Posts: 18,694	Basically it's sayiong that the lowlife who write these viruses are slagging each other off in the virus code, with each variant of a particular virus containing a taunt or a reply to that contained in a previous variant of a different virus. Bottom line is that we can expect these viruses to continue being setn round the net while the lowlife continue to fight

04 Mar 2004, 22:03	#40
Deb Mega Loafer Join Date: 26.04.2003 Location: Did I say that?... Posts: 4,162	wonderful I got some the other day that had 2 virus's in each mail!!! Deb

04 Mar 2004, 23:17	#41
Caz Super Loafer Join Date: 27.01.2004 Location: Dechmont, West Lothian, Scotland Posts: 900	Just found No. 2 in my Hotmail account with the subject header 'your body is sexy in your pic' they obviously haven't seen my body lol A lot of the virused emails going around seem to have different headers as the subjects so it's hard to tell. Plus, the email addies they are supposed to have come from appear to be genuine addies. Sometimes I wish hackers would put their talents to good use, like getting me £1,000,000 then I wouldn't have to work lol

04 Mar 2004, 23:58	#42
Deb Mega Loafer Join Date: 26.04.2003 Location: Did I say that?... Posts: 4,162	Just got another This one reckons its from wezzie at oifc Says i'm naked lolololol.. Return-Path: <edited@meatloaf-oifc.com> Received: from ntlworld.com ([80.1.32.65]) by mta05-svc.ntlworld.com (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP id <20040304215044.SQIH27661.mta05-svc.ntlworld.com@ntlworld.com> for <edited@ntlworld.com>; Thu, 4 Mar 2004 21:50:44 +0000 From: edited@meatloaf-oifc.com To: edited@ntlworld.com Subject: Re: <5664ddff?$??§2> Date: Thu, 4 Mar 2004 21:51:50 +0000 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0013_000031D9.00002B01" X-Priority: 3 X-MSMail-Priority: Normal Message-Id: <20040304215044.SQIH27661.mta05-svc.ntlworld.com@ntlworld.com> This is a multi-part message in MIME format. ------=_NextPart_000_0013_000031D9.00002B01 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit your are naked? ------=_NextPart_000_0013_000031D9.00002B01 Content-Type: plain/text; name="Norton AntiVirus Deleted1.txt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Norton AntiVirus Deleted1.txt" Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW50OiB1bmZvbGRzLnBpZi 4N ClRoZSBhdHRhY2htZW50IHdhcyBpbmZlY3RlZCB3aXRoIHRoZSBXMzIuTmV0c2t5LkNAbW 0g dmlydXMu ------=_NextPart_000_0013_000031D9.00002B01-- that make any sense to anyone? Deb

05 Mar 2004, 00:11	#43
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	FYI: I have edited the email addies in above post for privacy and security reasons.

05 Mar 2004, 00:12	#44
Caz Super Loafer Join Date: 27.01.2004 Location: Dechmont, West Lothian, Scotland Posts: 900	See what I mean about the subject headers. They must think we came down in the last shower ..... well so far we know three of the subject headers NOT to open lol ..... Maybe we should start a new topic with the subject: Virus Email Headers lol

05 Mar 2004, 06:45	#46
Wezzie Rookie Join Date: 07.02.2003 Posts: 20	sultonfan, I assure you I have never seen you naked ! I also hope you know I didn't send that to you, but at least you haven't got one from yourself yet !! Wanted to add something to Caz's post, unless you have a virus program and (thanks to David's suggestion) update it every day DON'T OPEN ANY ATTACHMENT !! It doesn't matter if you know the sender or not, as you saw sultonfan got something from whom she thought was me. This virus is I think the worst yet. Thanks for the link R. Wezzie

08 Mar 2004, 19:53	#49
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	FYI, there's another variant of the Sober worm active right now. This one arrives as a security patch from Microsoft. More info here: http://vil.nai.com/vil/content/v_101081.htm