Virus Advisory PLEASE READ

Atrocities · #1 August 26th, 2003, 09:16 AM

I just checked my email, and I have over thirty Messages containing attachments that are a virus.

PLEASE check your system for viruses.

Captain Kwok, please check your system. I got one from you.

If you received an email from me or one from astmod.com DO NOT OPEN IT! The chances are that the virus is cloning the hosts address book and using the names in it to send out FAKE emails pretending to be from someone you may or may not know.

In this case the email from Captain Kowk was more or likely a result of this and not sent by him.

The subject lines to be warry of are "Details" and a message that reads "Open the file to see more Details."

Others are "approved" "You've won" "Thank you" "Your mom has died" "You are owed money" etc. All of them have an attachment. DO NOT OPEN the attachment!

Best of luck to you and please be careful

Richard · #2 August 26th, 2003, 02:55 PM

It also fakes the sender. Just because you get an email from soneone doesn't necessarily mean they are infected.

But yes everyoneshould check their systems.

A free AV can be found at www.grisoft.com.

Atrocities · #3 August 26th, 2003, 03:08 PM

Quote:

The chances are that the virus is cloning the hosts address book and using the names in it to send out FAKE emails pretending to be from someone you may or may not know.

In this case the email from Captain Kowk was more or likely a result of this and not sent by him.

Thank Richard, I agree that it was more than likely not something that he even knew happened. It probably came from someone elses computer who had him in his mailing address book.

Just wanted people to be advised of this, since I got so many in one day I kind of figured something was up.

[ August 26, 2003, 14:10: Message edited by: Atrocities ]

Captain Kwok · #4 August 26th, 2003, 06:18 PM

I haven't sent out any e-mails for a few weeks, nor do I have an address book - so it must have been faked!

In the Last few weeks I've been running daily scans for viruses, and have none to report.

[ August 26, 2003, 17:20: Message edited by: Captain Kwok ]

Loser · #5 August 26th, 2003, 06:22 PM

So Big actually does more than just address books. It will look for e-mail addresses in text files, Word Documents, HTML content (including temporary internet files, where you are almost certain to have Atrocities address, along with a few score of other people), and some other source I can't remember.

tesco samoa · #6 August 26th, 2003, 09:04 PM

not to worry I got one from myself

But it was not from me

Andr�s · #7 August 27th, 2003, 06:33 AM

I just found my 50+ of these beautiful trojans. Almost erased a PBW turn that was among them.
Yep, it must be someone from the SE4 community because many of the aparent senders were se4 players and even MM's info email.

Not only I got one from myself,

I got one from my old email andreslescano@mad.scientist.com and that adress hasn't worked for years. It must be someone who has an old adress box.

Please check you computers. My inbox is small and I may not be able to get some of my mail if its full of this trash!

Tigbit · #8 August 27th, 2003, 07:02 AM

Okay, once again with the "senders can be faked" message.

Baron Grazic · #9 August 27th, 2003, 07:33 AM

Sorry, I haven't received 1 of these emails.
If you can get the IP address of where the email came from, you should be able to tell the domain name of the infected PC.

Andr�s · #10 August 27th, 2003, 07:39 AM

Yes, I know that senders are faked. But those faked adresses don't come out of nowhere.
If someone has many SE4 related adresses, including some old ones in his adressbook or somewhere else in his hard drive, he must be a long time SE4 player.
I guess there must be more than just 1 person infected, I heard that these viruses spread really fast and I doubt that I can be getting so many mails from only one person.

Edit: finding out someone's IP is beyond my internet knowledge

[ August 27, 2003, 06:47: Message edited by: Andres ]