Virus Alert!!!
Attention all forum members, there is a virus lurking about in email that both me and DH have received via email. (my NAV stopped and quarintined it...) If you have received an email with the subject of 'Av hemsida' DO NOT OPEN IT! DELETE IT IMMEDIATELY!
The virus is called 'W37.Klez.H@mm' and the email is a has an attachment that askes you if you want to open or save it. (which pops up even if you are using a preview pane). If you have already gotten that email, run a virus scan (if you have it on your computer). If you don't have a virus scanner on your computer go here: www.housecall.antivirus.com/housecall Stop this thing in its tracks! I am going to report this to Norton...*runs off* |
Ah, because of you, I successfully avoided my computer becoming infected...where would I be with out you, oh computer savy Dragon?
|
I got an email where like it said different fonts or something, and I have one now from some "arstu" guy that says
Hello,This is a funny game This game is my first work. You're the first player. I hope you would like it. Something tells me its time to run some virus scans. |
I got:
Hi,This is a humour game This game is my first work. You're the first player. I expect you would enjoy it. from a muxamar person.... Weird. Hey, I just clicked the name Muxamar... and it's Alcar.... |
I got an email from a muxamar person, too... It was blank, though, and didn't have any attatchments...
Anyway, I've already got enough viruses to contend with... |
Alright, I have sucsessfully removed the virus.
I was looking through my e-mail messages in my hotmail account (using Outlook Express), when I clicked on an e-mail called 'Av hemsida'. The download window appeared and went away very quickley. It didn't prompt me or anything, which was strange. I had already started searching for an onlien virus scanner, when Rach confirmed that it was a virus. The HouseCall virus scanner told me the name of it, and I managed to find a program to remove it on Norton.com: http://securityresponse.symantec.com...oval.tool.html If you have this virus, you must boot into Safe Mode before running the program (It won't take as long that way). To get into safe mode, you must restart your computer and press "F8" just before the Windows logo pops up. On another note, do not send me any e-mails until I get a proper virus scanner. I won't touch Outlook Express until then. - DH |
I got 2...they weren't any attachments but they were emails saying stupid stuff and i emailed back saying to them to stop being silly twats and not to email me again...it worked.
|
Dude thanks for warning us about that.
|
I appreciate this warning, a virus can be very damaging............
|
:
I haven't sent anything to you or Danny, ever. Are you sure you got the spelling correct? And anyway I would not send anyone a virus im not stupid, i hate viruses. I think i might just go and change my password, as a friend of mine said he knew my password, but i never believed him... Alcar... |
ANYONE WHO SEND A VIRUS SHOULD DIE!
But i'm not afraid or scared at all about viruses! PFFFT! |
Luckily I haven't yet recieved any of the aforementioned viruses, HOWEVER, I just apparently recieved one through MSN, I just opened a window to talk to a friend and all this stuff started scrolling down the screen and then gave me a message from the MSN Support Staff saying I got a virus called Micro$oft and I should delete the program. So I did. Anybody else got this one?
|
Well, I got one from "dragonzone" (Rach's old email) titled "Alla erbjudanden" - it was empty, but as I know Rach doesn't email me strange words anyway... ;) I just delete everything if I don't recognise the email or it doesn't have a vaguely sensible title that gives me some clue as to what the hell it's about. *shrugs* (Although those entitled "Grow your penis by 30%!" (Why I'd want that, as I'm a woman, is beyond me) and "Free Uni diplomas!" get deleted without being opened as well... ;))
Anyone know who "olpha32@hotmail.com" is? As he sent me an email asking ME what the "Special Nice Game" was - he'd apparently got it from my email address, which is weird as I hadn't even heard of the thing until he emailed me about it. Seeing this thread makes me wonder if it's the Oddforums email list being used to send the virus out to people...? Edit: As if to confirm my suspicions, I just got one from "Fazerina" (Yes, I know it was unlikely to be the real one. ;)) entitled "background" that was also empty..., although it was an 117k file, rather than just 1k (I have a friend that persistently sends me blank emails just to see if I'm there as he can't use IM on the computers at his Uni (Lampyland), although they're not always blank and I'm usually deleting the un-blank ones by mistake... doh) Edit 2: Cheese? Who me? *sneaks off with big old chunk of edam* |
Geez I hope its not the oddforums itself infected...would make sense though...as I got a strange email from Black Dragon's old addy...Pilot you might want to check in on this...
|
Probably not Oddworld Forums. Wouldn't know how a php file could get infected and send out emails.
I didn't get one. I just think it's the usual "send over address book" thingy. v_v Will they ever think of something else? *sigh* - TyA |
Oh no, oh no, oh no!
The mentioned virus using everyone else's screenname is called a "Trojan" virus. Very bad, and it sends itself to everyone in your address book! (or something like that :fuzemb: ) Anyways, it can be really vicious, and I've only gotten ONE really bad virus. That virus was at least a little creative, as it had a little cattapiller(sp) eating my screen as it destroyed my hard drive... Anyways, if you have recieved one of these emails from a "friend" listed in your addy, delete your address book and write it down! Again, thanks Rach for the heads up! *is glad he has McCaffe, VirusScan and Vshield. :talk: :Þ * |
When I checked my e-mail yesterday, there was a post from Erik (dark_xinos) and there wasn't any text in it, just an attachment. And because I'm too lazy [read=stupid] to run a virus scan for everything I download, I didn't do it this time either, but F-Secure said immediately that there was a virus in our computer and I deleted it. This is weird. Maybe it has something to do with the forums, then...
:
EDIT: I got it again. This time it was titled "Honey". Though the name was already so suspicious that I wasn't even going to open it at first...:p |
Trojan doesn't do the email thing. It just allows people (Hackers) to get into your computer and control it.
|
:
Maybe I'm just being gullible like Doug and your just joking....:P |
:
|
:
|
Just about any kind of virus can transmit itself via email; whether its a trojan, logic bomb, worm, etc. The most dangerous kind (the name escapes me at the moment) are the ones that actually seek out and destroy your anti-virus software...
|
I was speaking with Teal last night, this very subject popped up in conversation.
Like i said to her, PHP is very early in its years of being around, and is prone to hackers and viruses, but its not able to send out emails using that persons email address. And anyway the email function fo the forums has been disabled. The only way 'I' can see how this is being done is someone has some sort of program that allows them to use someones email address, and that the person doing this is on THESE FORUMS, but all you smart people would have already figured that out ;) Alcar... |
Well either someone who is on the forums either got the email list (I don't show off mine) of those who joined, or it could be a hacker, or it the known 'victims' were all justpure conwinidence(sp)(no I can't spell worth beans...)
|
*growls* I got it again...this time the subject was
'so cool a flash, enjoy!' I made note of who it was from...a 'Mr_ian89' (first one was from a 'rik...something'. |
I keep getting the silly thing under a variety of addresses. And I don't think it's using things like people's buddy lists in IM (ugh, "buddy" - hate the word *shudders*) as I've had the virus from people I don't even know, but found their email addresses on the forums...
(And Alcar, I already said to you that I never meant I thought it was coming direct from the forum server, I just said I thought someone had accessed the forums email list somehow, as the only connection I could see was that they were all OF email addies I was getting the virii from. (actually, I haven't had the virus, just lots of empty mails. Maybe the Uni firewall is stopping it getting through, although I didn't think it worked for hotmail... never mind.) So there, you evil rumour-spreader, you! Trying to make people think I'm stupid, whatever next... ;)) |
Av hemsida? That is in sweedish (means: from website).
Stupid evil sweeds... ehrm. Those guys i mean. |
"The only way 'I' can see how this is being done is someone has some sort of program that allows them to use someones email address, and that the person doing this is on THESE FORUMS, but all you smart people would have already figured that out"
That's silly. It doesn't have to have anything at all to do with the forums. It may've come from a poor guy who ticked off a hacker in the far region of a country you've never even heard of, but who had the email of your friend's friend's friend... if you see my point. Especially since you guys seem to rely a lot on MSN Messenger. Not sure, but doesn't MSN also send the email addys to your address book? I thought it did, which would explain why people are getting emails from people they never had actualy email contact to, but wanted to chat with (maybe even never saw the other person online). Or vice versa. Anyway, I don't think it's anyone on this board's fault. - TyA |
Yep, I thought I hadn't received any of these bogus emails until I decided to check my junk mail folder this afternoon. It appears that I've recieved messages from Eddie about a Spice Girls' concert and one from Jess that reads "Please try again" in the subject. I haven't opened them, but I'm almost 99% positive that they're one of these freaky emails. Hotmail has been automatically deleting them for me. Something odd is going on... as all the ones I've received are from the forums.
|
I just got a third one today... It was from "Erik" again. The subject was "Japanese girl VS playboy". I opened it and it was the same one again. No text, just the attachment...
|
Spice Girls?! I hate them. . . So I wouldn't go sending e-mails around telling peeps about them.
Anyway, I will not touch my e-mail until I get a virus checker of some sort. I will post on here when I get one. If you get an e-mail from me before I say that I have a virus checker, then the e-mail probably is a virus. (Hope you all get what I'm saying here. . .) - DH |
(OOC: Sorry for the double post. The Forums is being a pain again, so I couldn't scroll down and edit my post)
I have just found the log file left over from when the Anti-Virus program from Norton.com scanned my computer. Deleted the value "Winkon" from the registry key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run" The file "c:\WINDOWS\SYSTEM\Winkon.exe" is infected by W32.Klez.gen@mm. The tool could neither repair nor delete this file. The file "c:\WINDOWS\TEMP\Nih1321.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable. The file "c:\WINDOWS\TEMP\Moo9044.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable. The file "c:\WINDOWS\TEMP\Iec9032.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable. The file "c:\Program Files\Plus!\THEMES.EXE" is infected by W32.Klez.gen@mm. The file is repaired. The file "c:\Program Files\Abe's Exoddus\Exoddus.exe" is infected by W32.Klez.gen@mm. The file is repaired. The file "c:\Program Files\Mjuice Media Player\MJAgent.exe" is infected by W32.Klez.gen@mm. The file is repaired. The file "c:\Program Files\Abe's Oddysee\AbeWin.exe" is infected by W32.Klez.gen@mm. The file is repaired. The W32.Klez.gen@mm/W32.ElKern.gen infection removal was unsuccessful. The tool could not delete 1 viral file(s) from your PC. Please boot into Safe mode and run this tool again. Files that could not be repaired or deleted by this tool must be removed manually. Check the log file for a list of files that could not be deleted. If you need more information to assist you in performing any of the above tasks, you may search our Knowledge Base at http://www.symantec.com/search/ Here is the report: The total number of the scanned files: 44888 The number of deleted files: 3 The number of repaired files: 4 The number of viral processes terminated: 0 The number of viral services deleted: 0 The number of registry entries fixed: 1 I booted back up into Safe Mode later and removed to remaing file, just this log didn't record that. However, the funny thing was this: The virus infected both my Oddworld games!!! Is that suspicious or what?? - DH |
Well, I think someone on MSN said I sent a blank email, and they weren't on my address list. And its spreading through the forums or something, and my "funny" game turned out to not really do anything to my computer. Virus scan showed nothing, Real Time Virus thing didn't pop up ever, no newly installed files were found, and nothing ran in background etc... My dad (who is more or less a computer expert) said most viruses tend to be aimed at Outlook Express, so it may not be able to do anything through MSN. If it did anything, it was to MSN and not my computer, and its already done. Tha may also be the case with your "humor" game, Dyl.
|
:
I merly said you were stupi....i mean stupendous! ;) Just kidding. Dark Hood, as for the virus deleting your Oddworld games...well...thats just extremely odd, maybe this person doesn't like Oddworld very much, is there anyway you can see the senders IP? Alcar... |
Dag nabbit! I got it. Though i deleted it...
|
The virus never deleted my Abe games, since the program I used to remove it fixed both of them.
I don't think there's any way of getting the sneders IP address. - DH |
I've got a Virus that sends itself out in a blank email. So i need to know how to get rid of it...someone...HELP!!
|
I've recieved a message subjected "Spice girls vocal concert" from a CronoFiend. I don't know, someone from here? If so your virus is still spreading. I don't know the real email address, I'm not opening it...
|
Well, I don't THINK it's M$N, as I've had emails from people I've never even heard of, and people I've never heard of have had emails from ME, so... Oh well, let's just agree to disagree on where the hell it's coming from, and just concentrate on the business in hand... (deleting random emails without opening them... ;) )
|
I just came up with a EVIL plan, he he he. Next time you get that email, dont delete it, but dont open it either. Then, next time you go to you school... erhm, never mind. Bad idia.
|