1. Someone here have a Virus??
Hi,
I have been getting all these emails sent to me with subject lines like
...
Re: Your Application
Re: My Details
Re: Details
Re: Wicked screensaver
Re: That movie
etc
etc
which contains an "application.pif" attachment.
Also I get a responce from some university saying I sent them a virus
from my email address (which I know for a fact I didn't).
The message mentioned that the "from address" of the email is
possibly forged (which we all know is easy to do).
I also noticed one the emails I recieved was from
rds at rapideuphoria.com.
I'm assuming someone who has my email address and RDS's email address
has a virus which is spewing all of these emails out.
Anyone else seeing any of this?
Regards,
Ray Smith
http://rays-web.com
2. Re: Someone here have a Virus??
- Posted by ramarin at teleport.com
Aug 20, 2003
Here's a bit of info on the beasty ...
http://www3.ca.com/virusinfo/virus.aspx?ID=36376
-Roger
Ray Smith wrote:
>
>
> Hi,
>
> I have been getting all these emails sent to me with subject lines like
> ...
>
> Re: Your Application
> Re: My Details
> Re: Details
> Re: Wicked screensaver
> Re: That movie
> etc
> etc
>
> which contains an "application.pif" attachment.
>
> Also I get a responce from some university saying I sent them a virus
> from my email address (which I know for a fact I didn't).
> The message mentioned that the "from address" of the email is
> possibly forged (which we all know is easy to do).
> I also noticed one the emails I recieved was from
> rds at rapideuphoria.com.
>
> I'm assuming someone who has my email address and RDS's email address
> has a virus which is spewing all of these emails out.
>
> Anyone else seeing any of this?
>
> Regards,
>
> Ray Smith
> http://rays-web.com
>
>
>
> TOPICA - Start your own email discussion group. FREE!
>
>
3. Re: Someone here have a Virus??
- Posted by eugtk at yahoo.com
Aug 20, 2003
--- Ray Smith <smithr at ix.net.au> wrote:
> I have been getting all these emails sent to me with
> subject lines like
> ...
>
> Re: Your Application
> Re: My Details
> Re: Details
> Re: Wicked screensaver
> Re: That movie
> etc
> etc
>
> which contains an "application.pif" attachment.
>
> Also I get a responce from some university saying I
> sent them a virus
> from my email address (which I know for a fact I
> didn't).
> The message mentioned that the "from address" of the
> email is
> possibly forged (which we all know is easy to do).
> I also noticed one the emails I recieved was from
> rds at rapideuphoria.com.
>
> I'm assuming someone who has my email address and
> RDS's email address
> has a virus which is spewing all of these emails
> out.
>
> Anyone else seeing any of this?
Ray:
I've received several dozen just this morning -
messages
bounced or refused, which were supposedly send by
webmaster@ (business). That's me.
However, all the messages were sent using Outlook
Express, and I do not own a computer with any version
of Windows installed, much less Outlook Express.
Unfortunately, (business) will inevitably get irate
e-mails from people who think (business) is sending
them viruses. It is hard to convince non-technical
people that those e-mails weren't sent by us.
So (business) will likely lose some customers because
of this, as will hundreds of other affected
businesses. Since the fault clearly lies with
Microsoft for
releasing a product which can be so easily misused,
perhaps a class-action lawsuit would be appropriate.
Regards,
Irv
4. Re: Someone here have a Virus??
> --- Ray Smith <smithr at ix.net.au> wrote:
>
> > I have been getting all these emails sent to me with
> > subject lines like
> > ...
> >
> > Re: Your Application
> > Re: My Details
> > Re: Details
> > Re: Wicked screensaver
> > Re: That movie
> > etc
> > etc
> >
> > which contains an "application.pif" attachment.
> >
> > Also I get a responce from some university saying I
> > sent them a virus
> > from my email address (which I know for a fact I
> > didn't).
> > The message mentioned that the "from address" of the
> > email is
> > possibly forged (which we all know is easy to do).
> > I also noticed one the emails I recieved was from
> > rds at rapideuphoria.com.
The SoBig virus is having a field day these days. I got a whole bunch of
these messages today.
You're not a specifically targeted victim in this instance. You just happen
to be in some unlucky fool's address book and were randomly chosen to be the
return email in a bunch of messages. You also got sent a bunch of messages.
The companies that receive "your" spammed virus don't know any better so
they're just being cautious.
It's all automated, though... :/
> businesses. Since the fault clearly lies with
> Microsoft for
> releasing a product which can be so easily misused,
> perhaps a class-action lawsuit would be appropriate.
>
> Regards,
> Irv
Irv, I'm in.
5. Re: Someone here have a Virus??
On Wed, Aug 20, 2003 at 08:48:30AM -0500, C. K. Lester wrote:
> The SoBig virus is having a field day these days. I got a whole bunch of
> these messages today.
>
> You're not a specifically targeted victim in this instance. You just happen
> to be in some unlucky fool's address book and were randomly chosen to be the
> return email in a bunch of messages. You also got sent a bunch of messages.
>
> The companies that receive "your" spammed virus don't know any better so
> they're just being cautious.
>
> It's all automated, though... :/
It shouldnt be. Whoever thought of replying to the forged 'From' header
is a moron. (At least, it should check the unforgable header fields to make
certain that the From header is real and simply not reply if it looks
suspisous.)
Topica itself isnt much better tho, not one of the emails I've sent in the
past month is from jbrown105 at speedymail.org ... thats simply the
address I put in my Reply-To: field. And yet it shows up in the From: header.
This is something that can be easily abused.
>
> > Since the fault clearly lies with
> > Microsoft for
> > releasing a product which can be so easily misused,
> > perhaps a class-action lawsuit would be appropriate.
> >
> > Regards,
> > Irv
>
> Irv, I'm in.
Me three.
jbrown
--
Outlook Users, please don't put my email address in your address book. That way,
my email address won't appear in forged emails sent by email viruses. (Which are
technically worms btw :P)
--
Linux User:190064
Linux Machine:84163
6. Re: Someone here have a Virus??
That would be the SOBIG.F worm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBIG.F
If you will forward one of those to me as an attachment.
I can tell you what server it is coming from.
You look at the message header. The Received from: closest to the
actual message is where it came from. That would be a great thing to
post to the forum.. Maybe the infected person would realize it was them.
Good Luck cleaning it out. I have no problems cleaning. But I have
battled many worms and viruses. Just another annoying day to me.
Lucius L. Hilley III
----- Original Message -----
From: "Ray Smith" <smithr at ix.net.au>
To: "EUforum" <EUforum at topica.com>
Sent: Wednesday, August 20, 2003 12:19 AM
Subject: Someone here have a Virus??
>
>
> Hi,
>
> I have been getting all these emails sent to me with subject lines like
> ...
>
> Re: Your Application
> Re: My Details
> Re: Details
> Re: Wicked screensaver
> Re: That movie
> etc
> etc
>
> which contains an "application.pif" attachment.
>
> Also I get a responce from some university saying I sent them a virus
> from my email address (which I know for a fact I didn't).
> The message mentioned that the "from address" of the email is
> possibly forged (which we all know is easy to do).
> I also noticed one the emails I recieved was from
> rds at rapideuphoria.com.
>
> I'm assuming someone who has my email address and RDS's email address
> has a virus which is spewing all of these emails out.
>
> Anyone else seeing any of this?
>
> Regards,
>
> Ray Smith
> http://rays-web.com
>
>
>
> TOPICA - Start your own email discussion group. FREE!
>
>
