Home General Chat
If you need urgent support, call 999 or go to your nearest A&E. To contact our Crisis Messenger (open 24/7) text THEMIX to 85258.
Options

John Heidke

Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
I recieved an e-mail from a John Heidke today asking for advice on something that was in an attachment. When I went to open it the hotmail attachment-virus checker said there was an uncurable in it.

If any of you get this e-mail DO NOT OPEN IT!

Just to let you know.

It takes blood and guts to be this way but i'm still just a cliché.

Comments

  • Options
    Girl-From-MarsGirl-From-Mars Posts: 2,822 Boards Guru
    http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html


    "That which does not kill us makes us stronger."
    ~ Nietzsche
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    I heard a mention of the 'worm' on the news the other night, but it was the news and I wasn't really listening properly. <IMG alt="image" SRC="http://www.thesite.org/ubb/rolleyes.gif"&gt;

    It takes blood and guts to be this way but i'm still just a cliché.
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    john whoever probably didnt know he had sent it, it would have been distributed to all on his contact list without him knowing

    zonealarm renames those types of files, i believe it was a .plo or something (.pif i think actually)

    the worm was sommit different - it attacks sites, not emails. the site basically gets bombarded with crap and the message "hacked by chinese" comes up...it effects servers as well

    there's a patch for it though, so the problem should be sorted more quickly

    ˆMấ§ŧế®° <IMG alt="image" SRC="http://www.contrabandent.com/pez/games/poke/005.gif"&gt; ¤ĐєvĩŁĩ§Ħ¤™
  • Options
    the_Paranoid_bunnythe_Paranoid_bunny Posts: 487 Listening Ear
    Originally posted by MasterDevilish:
    the worm was sommit different - it attacks sites, not emails

    no, that was a different worm. sircam spreads mainly through emails.

    TheSite.org unofficial chat room!
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    MD, your thinking of Code Red which attacks any Windows NT/2000 machine running IIS (Internet Information Server), I had to deal with it on our system yesterday and to be truthful wasn't really that concerned over it as we had our first warning back in June...

    W32/SirCam@MM however has been a problem in our company and I had to deal with this last Friday and as I can't be bothered typing at the moment heres a copy of the email:

    Gledhill Global,

    I have been requested to issue out the following virus warning after this threat became 'High Risk' on the Network Associates
    website (The anti-virus software used and trusted within the company). The virus is known as 'W32/SirCam@MM' and if run by
    accident would automatically spread itself via everyone's mailbox and potentially cause a temporaly total machine shutdown on
    all stations, we have the adequate anti-virus protection means but still wish to monitor and isolate any potential threats.

    Please be on the look out, particularly on external emails, for any of the virus's common entry points...

    It may be received in an email message containing the following information:
    Subject: [filename (random)]
    Body: Hi! How are you?
    I send you this file in order to have your advice
    or I hope you can help me with this file that I send
    or I hope you like the file that I send you
    or This is the file with the information that you ask for
    See you later. Thanks
    --- the same message may be received in Spanish ---
    Hola como estas ?
    Te mando este archivo para que me des tu punto de vista
    or Espero me puedas ayudar con el archivo que te mando
    or Espero te guste este archivo que te mando
    or Este es el archivo con la información que me pediste
    Nos vemos pronto, gracias.
    --- end message ---
    Although other message body possibilities are present in the virus,
    these aren't actually being generated frequently.
    Attached will be a document with a double extension (the filename varies).

    If you receive any emails which you are unsure about or indeed similar to the one above could you please
    contact the IT Department who will be happy to check any 'potential threat' emails.


    Regards,


    Justin
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    Originally posted by the_Paranoid_bunny:
    no, that was a different worm. sircam spreads mainly through emails.


    ya i know, i meant the worm jeffrey referred to was the one attacking sites and servers (using servers to attack sites and not home PCs...generating more bandwidth)

    the sircam was the original topic thing

    ˆMấ§ŧế®° <IMG alt="image" SRC="http://www.contrabandent.com/pez/games/poke/005.gif"&gt; ¤ĐєvĩŁĩ§Ħ¤™
  • Options
    the_Paranoid_bunnythe_Paranoid_bunny Posts: 487 Listening Ear
    Originally posted by MasterDevilish:
    ya i know, i meant the worm jeffrey referred to was [code red]

    ahh i didn't know that.. i've seen both sircam and code red in the news lately.

    TheSite.org unofficial chat room!
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    Originally posted by MasterDevilish:
    john whoever probably didnt know he had sent it, it would have been distributed to all on his contact list without him knowing

    Then that would mean that he already had my address, right? Where the fuck did he get it from?

    It takes blood and guts to be this way but i'm still just a cliché.
  • Options
    Girl-From-MarsGirl-From-Mars Posts: 2,822 Boards Guru
    Originally posted by jeffrey:
    Then that would mean that he already had my address, right? Where the fuck did he get it from?


    god knows, i had one from someone id never heard of about youth parliaments. i emailed back and said fuck off with your silly worms and they proceeded to send it again. got deleted both times. and jst got very over-excited about it and told me NOT TO CLICK ON IT AND DELETE IT!!!!!! <IMG alt="image" SRC="http://www.thesite.org/ubb/biggrin.gif"&gt; <IMG alt="image" SRC="http://www.thesite.org/ubb/tongue.gif"&gt;

    it cant actually do damage unless you open the attached file. so people who receive this email shouldnt worry if they happen to open the email, tis harmless.

    and justin pretty much has code red covered, so that will be all <IMG alt="image" SRC="http://www.thesite.org/ubb/smile.gif"&gt;

    "That which does not kill us makes us stronger."
    ~ Nietzsche
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    Originally posted by jeffrey:
    Then that would mean that he already had my address, right? Where the fuck did he get it from?


    could have been from a massive forward, some people have it set up so that all addresses they reply to are entered in as a contact

    email addresses can get bounded all over the place

    ˆMấ§ŧế®° <IMG alt="image" SRC="http://www.contrabandent.com/pez/games/poke/005.gif"&gt; ¤ĐєvĩŁĩ§Ħ¤™
  • Options
    the_Paranoid_bunnythe_Paranoid_bunny Posts: 487 Listening Ear
    i received this email today from someone i don't know... the attached program created a Mircosoft Excel spreadsheet about "domestic royalties" and tried to open in, failing because i don't have Excel installed. it also infected my system with the Sircam worm.

    i downloaded the fix tool from SARC to try it out, and it removed all traces of the worm

    TheSite.org unofficial chat room!
  • Options
    Former MemberFormer Member Posts: 1,876,323 The Mix Honorary Guru
    Originally posted by the_Paranoid_bunny:
    i received this email today from someone i don't know... the attached program created a Mircosoft Excel spreadsheet about "domestic royalties" and tried to open in, failing because i don't have Excel installed. it also infected my system with the Sircam worm.

    i downloaded the fix tool from SARC to try it out, and it removed all traces of the worm


    so u opened up a dodgy attachment in an email from someone u dont know? and u wanna tell people u do that? <IMG alt="image" SRC="http://www.thesite.org/ubb/confused.gif"&gt;



    ˆMấ§ŧế®° <IMG alt="image" SRC="http://www.contrabandent.com/pez/games/poke/005.gif"&gt; ¤ĐєvĩŁĩ§Ħ¤™
  • Options
    the_Paranoid_bunnythe_Paranoid_bunny Posts: 487 Listening Ear
    Originally posted by MasterDevilish:
    so u opened up a dodgy attachment in an email from someone u dont know? and u wanna tell people u do that? <IMG alt="image" SRC="http://www.thesite.org/ubb/confused.gif"&gt;

    on a test machine! i reformat the thing nearly every other day

    TheSite.org unofficial chat room!
Sign In or Register to comment.