Results 1 to 9 of 9
  1. #1
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    2,279
    this one is getting really annoying -- especially since it can spoof the "reply-to" email making the mail the virus sends appear to come from a trusted source...

    Here are some sample subject lines for this one: How are you
    Let's be friends
    Darling
    Don't drink too much
    Your password
    Honey
    Some questions
    Please try again
    Welcome to my hometown
    the Garden of Eden
    introduction on ADSL
    Meeting notice
    Questionnaire
    Congratulations
    Sos!
    japanese girl VS playboy
    Look,my beautiful girl friend
    Eager to see you
    Spice girls' vocal concert
    Japanese lass' sexy pictures

    here's more info

    Check your own virus protection software site -- this has been out there for about a week, they should have a patch.

  2. #2
    Member
    Join Date
    January 18th, 2005
    Posts
    72
    You use Sophos? Me too. I like it. My whole company uses it.

  3. #3
    ABW Ambassador Packy's Avatar
    Join Date
    January 18th, 2005
    Location
    Syracuse
    Posts
    4,205
    I've been getting pounded pretty good the last week or so. Some of the ones I am getting come back returned email like I was the one who sent it to someone. The worse thing is that I have always gotten them in my website emails that are listed on my pages. Now I am getting alot sent to my private email. <IMG src=http://www.abestweb.com/ubb/icons/icon8.gif>

  4. #4
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    2,279
    Actually, no, I don't use Sophos -- they just had the top general info link in google when I searched on the virus name. [img]/infopop/emoticons/icon_wink.gif[/img]

    I am so sick of this one already. Sircam was worse (volumewise), but this one has lots of well-meaning people informing you that you're passing around a virus... when you're not. I don't even use a mail reader that can be infected!!

    Ah well.

  5. #5
    ABW Ambassador Packy's Avatar
    Join Date
    January 18th, 2005
    Location
    Syracuse
    Posts
    4,205
    Cedric, I'm getting the same thing. I got an email today thanking me for sending them a fix to a virus they have. I never sent anything to that person. She said she tried to install it but can't get it to work. I sent her a reply and advised her that it wasn't sent from me and that it was most likely a virus that she opened and to get some anti virus software.

    Obviously it must me pulling our emails off of our websites and using them to make it look like it is from us. Road Runner is getting pounded and the sent out something like 80,000 emails with the virus or so they think they did but I think it is taking their emails from their stes also. I'm going to go and pull all the email addys I have on my sites unless anyone else has an idea as to what is going on.

    I ran the virus scan the last couple of days and I show no sign of the virus. Also the person who emailed me isn't in my addy book so I don't know where they are getting the email addys that they send the virus to.

    More info at

    http://vil.mcafee.com/dispVirus.asp?virus_k=99455

    Microsoft has a patch out. I don't know if it is new or old but I better go see if I have downloaded it yet. The virus was upgraded to Medium level and from the looks of it, it most likely will be updated again sometime soon to High. <IMG src=http://www.abestweb.com/ubb/icons/icon29.gif>

  6. #6
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    2,279
    Gameboy, don't know if it's the case with this one, but with Sircam, it could pull email addresses out of web pages CACHED on the person's harddrive... my guess, this one's the same.

    And yeah, that fix "you" sent? That's the virus. [img]/infopop/emoticons/icon_wink.gif[/img] Poor lady.

    The patch, if it's the one that was out this morning, is old. This virus uses the same security hole the kakworm used.

    Sircam was the one, though, that got me to switch mail programs and I now use one that is not vulnerable to these problems AND where I can look at everything on the server-- and delete it without ever downloading it.

  7. #7
    ABW Ambassador Packy's Avatar
    Join Date
    January 18th, 2005
    Location
    Syracuse
    Posts
    4,205
    My thing is that the emails aren't being sent from my computer. The only place they can get the email from is from my website which is hosted on rr server. Where are the emails being sent from???


    <BLOCKQUOTE class="ip-ubbcode-quote"><font size="-1">quote:</font><HR>I am so sick of this one already. Sircam was worse (volumewise), but this one has lots of well-meaning people informing you that you're passing around a virus... when you're not. I don't even use a mail reader that can be infected!!<HR></BLOCKQUOTE>

    Cedric, They are probably getting email with your email address as the sender. That is what is happening to me. I am also getting emails returned that were never sent from my computer. Also the emails that I am getting that I never sent, I don't have them in my address book or on my computer anywhere. i don't know who the people are.

    [ 04-24-2002: Message edited by: GameBoy ]

  8. #8
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    2,279
    <BLOCKQUOTE class="ip-ubbcode-quote"><font size="-1">quote:</font><HR>Cedric, They are probably getting email with your email address as the sender.<HR></BLOCKQUOTE>I know I know... it get's YOUR address off YOUR web page which is cached on the INFECTED PERSON'S computer.

    So any infected person who has visited your web site in the recent past is possibly sending infected emails that appear to come from you. The emails are sent from the infected person's computer (without their knowledge).

    Which is why you don't know the people. But if you didn't get slammed by SirCam, take heart. Your site must be getting more popular. [img]/infopop/emoticons/icon_wink.gif[/img] During Sircam, I was getting the #@$%^ things (remember my high traffic site?) at a rate of 1 every 2-3 minutes (or 2-3 every minute, I don't remember which). At that volume and with HUGE attachements, I had to shut down my mail server.

    And I didn't know a single soul who was sending me this stuff -- they were all people who had visited my web site before they got infected.

  9. #9
    ABW Ambassador Packy's Avatar
    Join Date
    January 18th, 2005
    Location
    Syracuse
    Posts
    4,205
    Cedric,

    <BLOCKQUOTE class="ip-ubbcode-quote"><font size="-1">quote:</font><HR>Gameboy, don't know if it's the case with this one, but with Sircam, it could pull email addresses out of web pages CACHED on the person's harddrive... my guess, this one's the same.<HR></BLOCKQUOTE>

    OIC! <IMG src=http://www.abestweb.com/ubb/icons/icon12.gif> I didn't understand what you were saying at first dude! <IMG src=http://www.abestweb.com/ubb/icons/icon12.gif> Now I do though. I need a nap I think.

  10. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Can't log in due to message from virus software
    By boningroup in forum ShareASale - SAS
    Replies: 16
    Last Post: September 10th, 2011, 09:51 AM
  2. Anti Virus Software Affiliate Program
    By Chris - AMWSO in forum AMWSO
    Replies: 7
    Last Post: July 28th, 2005, 08:16 PM
  3. VIRUS FROM WINDOWS UPDATE???
    By 807 in forum Midnight Cafe'
    Replies: 4
    Last Post: May 2nd, 2002, 11:30 AM
  4. Update Your Virus Protection
    By Cedric in forum Midnight Cafe'
    Replies: 16
    Last Post: November 28th, 2001, 04:42 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •