Am I the only one STILL receiving e-mail viruses?

[Drewus]

I got ANOTHER e-mail today with ANOTHER one of those bloody e-mail viruses. This time from a different user and the e-mail also contained different text.

It was from a person called Sandy Bass with the e-mail address "_sandybass@<hidden>"

the name of the file is Setup.doc.scr

I'm going to try and get in touch with earthlink to see if they can track down this person and hopefully stop them from doing it.

Anyway, has anyone else received anymore of these e-mail lately?

[Unl33t]

I don't get virus's in my Email because i don't give my email out to anyone unless i aboslutly have to.

I get 1 email a month maybe, And it is always from someone i trust, and i am Always expecting that email.

[theavonlady]

I received a virus a few days ago from an OFP player. They obviously got infected from someone else. These are usually not intentional malicious attempts to infect others.

The best thing to do is to reply to the person, tell them what's happening and that they should disconnect from the WEB till they clean their PC up.

Contacting the person's ISP will only take it much longer for the ISP to do the same, if even that.

[Sandman]

I´ve got a virus today. It was from some guy I never heard of. It had an attachment "xxxxxxx.mp3.pif"

The virus tried to infect my computer, even though I didnt open any attachments, but my F-Secure got it, classifying it as "I-worm.badtransII".

Is this the thing your talking about?

DON'T EVER OPEN ANY MAILS FROM UNKNOWN ORIGIN AND DON'T OPEN ATACHEMENTS EVEN IF THEY COME FROM A FRIEND UNLESS YOU ARE TOLD BY THAT FRIEND HE WOULD SEND IT.

[Sandman]

Here´s some info on the subject:

http://www.europe.f-secure.com/v-descs/badtrs_b.shtml

this is what I got, and I think this is what you guys got also...


(Edited by Sandman at 10:00 am on Nov. 27, 2001)


(Edited by Sandman at 10:10 am on Nov. 27, 2001)

[theavonlady]

</span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td>Quote </td></tr><tr><td id="QUOTE">Quote: from Sandman on 10:03 am on Nov. 27, 2001

The virus tried to infect my computer, even though I didnt open any attachments, but my F-Secure got it, classifying it as "I-worm.badtransII".
[/QUOTE]<span id='postcolor'>

No. Your AV software checked the attachment when you opened the post. The virus didn't do anything unless:

1. You attempted to open it.

2. You're using MS Outlook and have not installed all security fixes to date.

A friend sent me a humorous MOV file yesterday under the subject "Don't trust anyone". Well I don't and I emailed them back asking if they actually sent it out themselves or was it some sort of email worm.

Always ask if you're not sure. Make sure you have the latest security fixes for Windows and your software, including such things as checking MS Office documents containing macros.

Also, by default (at least in W98), Windows will hide and not display certain file types. For example, if you see an attachment named document.txt, it could actually be named document.txt.shs. The file type SHS is what's known as a scrap file, which can contain code that will utterly ruin your machine.

Search CERT (http://www.cert.org/), Microsoft (http://www.microsoft.com/) and ZDNET (http://www.zdnet.com/) for "SHS" to find out what other potentially malicious file types are hidden by Windows and how to modify Windows to always display them.

[theavonlady]

BTW, search The FAQ (http://www.theavonlady.org/theofpfaq/) for "virus". The player community never got a definitive answer from CM, BIS or mission makers in the know. I would love to know for sure. Would'nt you?

[Sandman]

1. I said that it tried to infect, not that it did...My AV software got it before...therefore it didnt do anything.

2. I DO got the latest security packs installed on my workstation. Perhaps these differs under a NT-station-system (I do not know).

Under normal circumstances, when I get a virus infection, worm or trojan, they simply do not work under NTFS-filesystem. However, this one seems to manage.

[Gorgi Knootewoot]

He, i also got mail from Sandy Bass. i read the mail as it said ":Re". But there was no text. I didn't look for an attachment, but luckily i deleted the mail. Thanks for the warning as i didn't know that it was a mailvirus.

Gorgi

[Unl33t]

</span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td>Quote </td></tr><tr><td id="QUOTE">Quote: from RedStorm on 7:05 pm on Nov. 27, 2001
DON'T EVER OPEN ANY MAILS FROM UNKNOWN ORIGIN AND DON'T OPEN ATACHEMENTS EVEN IF THEY COME FROM A FRIEND UNLESS YOU ARE TOLD BY THAT FRIEND HE WOULD SEND IT.
[/QUOTE]<span id='postcolor'>

Exactly, but there is still that 70% of the dumbass population that do and as a result the virus spreads faster to more and more dumbasses.

[RN Malboeuf]

I've come to the conclusion they are fake user names and it does look like that Virus you mentioned BadTrans.B

http://www.flashpoint1985.com/cgi-bin/ikonboard/topic.cgi?forum=18&topic=1011

I posted this eailier today

Also just let you guys know the Email runs by it's self, as soon as you look at the email.

if you got this email and did not see it ask to save any thing or your virus scanner did not pick it up then your infected

seems the subject line is RE:

I'm pretty safe

(Edited by RN Malboeuf at 9:00 am on Nov. 27, 2001)

[theavonlady]

</span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td>Quote </td></tr><tr><td id="QUOTE">Quote: from RN Malboeuf on 3:48 pm on Nov. 27, 2001
seems the subject line is RE:
[/QUOTE]<span id='postcolor'>

There are plenty available with enticing or convincing subject lines. Don't let this fool you.

[RN Malboeuf]

I meant these latest Emails all have RE: in the subject

I have seen the sircam and now this virus and still remain uninfected because active X is disabled