1. Someone here have a Virus??
- Posted by Ray Smith <smithr at ix.net.au> Aug 20, 2003
- 495 views
Hi, I have been getting all these emails sent to me with subject lines like ... Re: Your Application Re: My Details Re: Details Re: Wicked screensaver Re: That movie etc etc which contains an "application.pif" attachment. Also I get a responce from some university saying I sent them a virus from my email address (which I know for a fact I didn't). The message mentioned that the "from address" of the email is possibly forged (which we all know is easy to do). I also noticed one the emails I recieved was from rds at rapideuphoria.com. I'm assuming someone who has my email address and RDS's email address has a virus which is spewing all of these emails out. Anyone else seeing any of this? Regards, Ray Smith http://rays-web.com
2. Re: Someone here have a Virus??
- Posted by ramarin at teleport.com Aug 20, 2003
- 507 views
Here's a bit of info on the beasty ... http://www3.ca.com/virusinfo/virus.aspx?ID=36376 -Roger Ray Smith wrote: > > > Hi, > > I have been getting all these emails sent to me with subject lines like > ... > > Re: Your Application > Re: My Details > Re: Details > Re: Wicked screensaver > Re: That movie > etc > etc > > which contains an "application.pif" attachment. > > Also I get a responce from some university saying I sent them a virus > from my email address (which I know for a fact I didn't). > The message mentioned that the "from address" of the email is > possibly forged (which we all know is easy to do). > I also noticed one the emails I recieved was from > rds at rapideuphoria.com. > > I'm assuming someone who has my email address and RDS's email address > has a virus which is spewing all of these emails out. > > Anyone else seeing any of this? > > Regards, > > Ray Smith > http://rays-web.com > > > > TOPICA - Start your own email discussion group. FREE! > >
3. Re: Someone here have a Virus??
- Posted by eugtk at yahoo.com Aug 20, 2003
- 478 views
--- Ray Smith <smithr at ix.net.au> wrote: > I have been getting all these emails sent to me with > subject lines like > ... > > Re: Your Application > Re: My Details > Re: Details > Re: Wicked screensaver > Re: That movie > etc > etc > > which contains an "application.pif" attachment. > > Also I get a responce from some university saying I > sent them a virus > from my email address (which I know for a fact I > didn't). > The message mentioned that the "from address" of the > email is > possibly forged (which we all know is easy to do). > I also noticed one the emails I recieved was from > rds at rapideuphoria.com. > > I'm assuming someone who has my email address and > RDS's email address > has a virus which is spewing all of these emails > out. > > Anyone else seeing any of this? Ray: I've received several dozen just this morning - messages bounced or refused, which were supposedly send by webmaster@ (business). That's me. However, all the messages were sent using Outlook Express, and I do not own a computer with any version of Windows installed, much less Outlook Express. Unfortunately, (business) will inevitably get irate e-mails from people who think (business) is sending them viruses. It is hard to convince non-technical people that those e-mails weren't sent by us. So (business) will likely lose some customers because of this, as will hundreds of other affected businesses. Since the fault clearly lies with Microsoft for releasing a product which can be so easily misused, perhaps a class-action lawsuit would be appropriate. Regards, Irv
4. Re: Someone here have a Virus??
- Posted by "C. K. Lester" <cklester at yahoo.com> Aug 20, 2003
- 450 views
> --- Ray Smith <smithr at ix.net.au> wrote: > > > I have been getting all these emails sent to me with > > subject lines like > > ... > > > > Re: Your Application > > Re: My Details > > Re: Details > > Re: Wicked screensaver > > Re: That movie > > etc > > etc > > > > which contains an "application.pif" attachment. > > > > Also I get a responce from some university saying I > > sent them a virus > > from my email address (which I know for a fact I > > didn't). > > The message mentioned that the "from address" of the > > email is > > possibly forged (which we all know is easy to do). > > I also noticed one the emails I recieved was from > > rds at rapideuphoria.com. The SoBig virus is having a field day these days. I got a whole bunch of these messages today. You're not a specifically targeted victim in this instance. You just happen to be in some unlucky fool's address book and were randomly chosen to be the return email in a bunch of messages. You also got sent a bunch of messages. The companies that receive "your" spammed virus don't know any better so they're just being cautious. It's all automated, though... :/ > businesses. Since the fault clearly lies with > Microsoft for > releasing a product which can be so easily misused, > perhaps a class-action lawsuit would be appropriate. > > Regards, > Irv Irv, I'm in.
5. Re: Someone here have a Virus??
- Posted by jbrown105 at speedymail.org Aug 20, 2003
- 490 views
On Wed, Aug 20, 2003 at 08:48:30AM -0500, C. K. Lester wrote: > The SoBig virus is having a field day these days. I got a whole bunch of > these messages today. > > You're not a specifically targeted victim in this instance. You just happen > to be in some unlucky fool's address book and were randomly chosen to be the > return email in a bunch of messages. You also got sent a bunch of messages. > > The companies that receive "your" spammed virus don't know any better so > they're just being cautious. > > It's all automated, though... :/ It shouldnt be. Whoever thought of replying to the forged 'From' header is a moron. (At least, it should check the unforgable header fields to make certain that the From header is real and simply not reply if it looks suspisous.) Topica itself isnt much better tho, not one of the emails I've sent in the past month is from jbrown105 at speedymail.org ... thats simply the address I put in my Reply-To: field. And yet it shows up in the From: header. This is something that can be easily abused. > > > Since the fault clearly lies with > > Microsoft for > > releasing a product which can be so easily misused, > > perhaps a class-action lawsuit would be appropriate. > > > > Regards, > > Irv > > Irv, I'm in. Me three. jbrown -- Outlook Users, please don't put my email address in your address book. That way, my email address won't appear in forged emails sent by email viruses. (Which are technically worms btw :P) -- Linux User:190064 Linux Machine:84163
6. Re: Someone here have a Virus??
- Posted by Lucius Hilley <l3euphoria at bellsouth.net> Aug 21, 2003
- 484 views
That would be the SOBIG.F worm http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBIG.F If you will forward one of those to me as an attachment. I can tell you what server it is coming from. You look at the message header. The Received from: closest to the actual message is where it came from. That would be a great thing to post to the forum.. Maybe the infected person would realize it was them. Good Luck cleaning it out. I have no problems cleaning. But I have battled many worms and viruses. Just another annoying day to me. Lucius L. Hilley III ----- Original Message ----- From: "Ray Smith" <smithr at ix.net.au> To: "EUforum" <EUforum at topica.com> Sent: Wednesday, August 20, 2003 12:19 AM Subject: Someone here have a Virus?? > > > Hi, > > I have been getting all these emails sent to me with subject lines like > ... > > Re: Your Application > Re: My Details > Re: Details > Re: Wicked screensaver > Re: That movie > etc > etc > > which contains an "application.pif" attachment. > > Also I get a responce from some university saying I sent them a virus > from my email address (which I know for a fact I didn't). > The message mentioned that the "from address" of the email is > possibly forged (which we all know is easy to do). > I also noticed one the emails I recieved was from > rds at rapideuphoria.com. > > I'm assuming someone who has my email address and RDS's email address > has a virus which is spewing all of these emails out. > > Anyone else seeing any of this? > > Regards, > > Ray Smith > http://rays-web.com > > > > TOPICA - Start your own email discussion group. FREE! > >