Ironworks Gaming Forum

Ironworks Gaming Forum (http://www.ironworksforum.com/forum/index.php)
-   General Conversation Archives (11/2000 - 01/2005) (http://www.ironworksforum.com/forum/forumdisplay.php?f=28)
-   -   NEW VIRUS -- Don't Open any PIF, EXE, VBS or COM files ever! (http://www.ironworksforum.com/forum/showthread.php?t=69409)

Ziroc 07-20-2001 04:48 PM

New Virus name is: "W32/SirCam@MM"

You'll get an email saying:

Subject: The subject of the email will be random, and will be the same as the file name of the attachment in the email.

Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for

With Attachments -- DO NOT EVER RUN ATTACHMENTS before you scan them. Even if it LOOKS like it came from your MOM even.

Mem got infected.. I just got 2 emails from him.. I let him know, and all the virus sites say that this is spreading BIGTIME. Be safe guys!

BUT.....

If you RAN this attachment, go here and get rid of it before October 16th.
http://www.symantec.com/avcenter/ven...m.worm@mm.html



------------------
Ziroc
Ironworks Webmaster
www.tgeweb.com/ironworks

Lioness 07-20-2001 04:50 PM

Thanx, Ziroc, I saw the message at the top of the page, but am glad you put a warning here, it's much more noticeable. http://www.tgeweb.com/cgi-bin/ubb/no...iles/smile.gif
Good Luck with yours Memmy!

------------------
http://members.aol.com/lasttrueprinc...s/lioness1.jpg
Official teaser and ranger of the HADB Clan
"I am great...start bowin'"
heeheeheeheehee :D

Melusine 07-20-2001 04:51 PM

Ziroc!! thanks!
I got one and I smelled something fishy too http://www.tgeweb.com/cgi-bin/ubb/no...iles/frown.gifhttp://www.tgeweb.com/cgi-bin/ubb/no...miles/wink.gif
So I replied to let Memny know as well....
stupid viruses http://www.tgeweb.com/cgi-bin/ubb/no.../angryfire.gif

------------------
Melusine, High Queen of Fluffies, Archbabe of the OHF, the LH,
the HADB and the SPAE(Society for the
Prevention of Acronym Extinction) &
Official Entertainer Elf of the BG2 Bar
http://www.angelfire.com/anime2/memnoch/mel1.gif
Your voice is ambrosia
Amy Brown Fantasy Art

Fljotsdale 07-20-2001 04:52 PM

Thank you, Ziroc! Info much appreciated.

------------------
http://www.ranchoweb.com/images/bg2guy/bitchingcopy.gif

http://www.ranchoweb.com/images/bg2guy/fljotsdale.gif http://www.tgeweb.com/cgi-bin/ubb/no...s/EEhearts.gif

Larry_OHF 07-20-2001 04:52 PM

<font color="white">Thanks...our MIS Help Desk people warned us this morning about that very same virus, so I guess I can help you to confirm to everyone else to be on guard. </font>

------------------
http://members.aol.com/lasttrueprinc...ges/larry2.gif
Devoted member of the Ironworks
Loyal guardian of the OHF
Member of the Ancients' club
Witness of the 4,000th post by Cloudposter
Currently engaged in the Throne of Bhaal expansion set

Xanthul 07-20-2001 04:56 PM

2 days ago i got 4 of these in spanish, i think it was weird so i didnt open it. Today i got one in english from memnoch, the file name was SexDiary.doc.bat so i thought it was something funny that he wanted to send me, and as i had seen the virus only in spanish i didnt realize that the words were the same as in the old messages so ive opened it http://www.tgeweb.com/cgi-bin/ubb/no...iles/frown.gif. Im gonna install my antivirus now to see what can i do.

NOTE: when hotmail checked the file for viruses he didnt find any, Bill Gates TM http://www.tgeweb.com/cgi-bin/ubb/noncgi/smiles/mad.gif

------------------
http://www.angelfire.com/anime2/memnoch/ertai2.gif "I´ve been captured... and I don´t care" -Ertai, Captive of the Blinding Angel

Ziroc 07-20-2001 05:50 PM

Quote:

Originally posted by Ertai_OHF:
2 days ago i got 4 of these in spanish, i think it was weird so i didnt open it. Today i got one in english from memnoch, the file name was SexDiary.doc.bat so i thought it was something funny that he wanted to send me, and as i had seen the virus only in spanish i didnt realize that the words were the same as in the old messages so ive opened it http://www.tgeweb.com/cgi-bin/ubb/no...iles/frown.gif. Im gonna install my antivirus now to see what can i do.

NOTE: when hotmail checked the file for viruses he didnt find any, Bill Gates TM http://www.tgeweb.com/cgi-bin/ubb/noncgi/smiles/mad.gif


Yep, I just got an email from 'you' (The virus, not you personally) in my INBOX. http://www.tgeweb.com/cgi-bin/ubb/no...iles/smile.gif. Clean it quick, and email everyone in your address book NOT to open they other one.



------------------
Ziroc
Ironworks Webmaster
www.tgeweb.com/ironworks

Xanthul 07-20-2001 06:09 PM

Ive deleted the file and scanned all of my hard drives and memory and mails and everything in my mail, i think its ok now. viruses suck

could i sue hotmail for not detecting it ?? it would be fun http://www.tgeweb.com/cgi-bin/ubb/no...es/biggrin.gif

------------------
http://www.angelfire.com/anime2/memnoch/ertai2.gif "I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

Xanthul 07-20-2001 06:29 PM

Info, detecting and fixing in this link

http://www.symantec.com/avcenter/ven...ered.worm.html

------------------
http://www.angelfire.com/anime2/memnoch/ertai2.gif "I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

Cloudbringer 07-20-2001 06:29 PM

Dan! I was just about to post this and warn people... it can also be called W95/Sircam...etc and I had the distinct displeasure of opening my hotmail from him and infecting my office pc! (Sorry Memsy, not your fault!http://www.tgeweb.com/cgi-bin/ubb/no...iles/smile.gif )

My tech support removed the payload but the damage was done, somehow my windows won't boot up and they may have to wipe my hd. Sigh....oh and fyi the file was pure porn and I knew at once that Memsy hadn't sent it to me, but it was too late. File name was file4.doc. (souns harmless, doesn't it? http://www.tgeweb.com/cgi-bin/ubb/no...les/tongue.gif) These are random so yours may be different.

Everyone, please note that it came to my HOTMAIL acct and you should NOT open any attachments in mail from Mario (or me, now!)in your hotmail accounts. (or any html attachments period!)

What a way to start my vacation...sigh

Cloudy, holding a sick kitty who just sneezzed on her leg http://www.tgeweb.com/cgi-bin/ubb/no...iles/frown.gif

------------------
http://www.wizardrealm.com/images/bestow1.jpg

Raindancer of the Laughing Hyenas Clan
Storm-Queen
StormCloud of the Black Knight: Heart Mind Soul Forever
"To sleep, perchance to dream..."

[This message has been edited by Cloudbringer (edited 07-20-2001).]


All times are GMT -4. The time now is 04:44 AM.

Powered by vBulletin® Version 3.8.3
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
©2024 Ironworks Gaming & ©2024 The Great Escape Studios TM - All Rights Reserved