Virus Alert!!!

Sl'askia · #1 05-12-2002, 07:36 PM

Attention all forum members, there is a virus lurking about in email that both me and DH have received via email. (my NAV stopped and quarintined it...) If you have received an email with the subject of 'Av hemsida' DO NOT OPEN IT! DELETE IT IMMEDIATELY!
The virus is called 'W37.Klez.H@mm' and the email is a has an attachment that askes you if you want to open or save it. (which pops up even if you are using a preview pane).
If you have already gotten that email, run a virus scan (if you have it on your computer). If you don't have a virus scanner on your computer go here:
www.housecall.antivirus.com/housecall

Stop this thing in its tracks!
I am going to report this to Norton...*runs off*

Disgruntled Intern · #2 05-12-2002, 07:39 PM

Ah, because of you, I successfully avoided my computer becoming infected...where would I be with out you, oh computer savy Dragon?

Majic · #3 05-12-2002, 07:51 PM

I got an email where like it said different fonts or something, and I have one now from some "arstu" guy that says

Hello,This is a funny game
This game is my first work.
You're the first player.
I hope you would like it.

Something tells me its time to run some virus scans.

Melvin:squeeking paramite · #4 05-12-2002, 08:03 PM

I got:

Hi,This is a humour game
This game is my first work.
You're the first player.
I expect you would enjoy it.

from a muxamar person.... Weird. Hey, I just clicked the name Muxamar... and it's Alcar....

Danny · #5 05-12-2002, 08:06 PM

I got an email from a muxamar person, too... It was blank, though, and didn't have any attatchments...

Anyway, I've already got enough viruses to contend with...

DarkHoodness · #6 05-12-2002, 08:38 PM

Alright, I have sucsessfully removed the virus.

I was looking through my e-mail messages in my hotmail account (using Outlook Express), when I clicked on an e-mail called 'Av hemsida'. The download window appeared and went away very quickley. It didn't prompt me or anything, which was strange. I had already started searching for an onlien virus scanner, when Rach confirmed that it was a virus. The HouseCall virus scanner told me the name of it, and I managed to find a program to remove it on Norton.com:

http://securityresponse.symantec.com...oval.tool.html

If you have this virus, you must boot into Safe Mode before running the program (It won't take as long that way). To get into safe mode, you must restart your computer and press "F8" just before the Windows logo pops up.

On another note, do not send me any e-mails until I get a proper virus scanner. I won't touch Outlook Express until then.
- DH

Jacob · #7 05-12-2002, 09:54 PM

I got 2...they weren't any attachments but they were emails saying stupid stuff and i emailed back saying to them to stop being silly twats and not to email me again...it worked.

paramiteabe · #8 05-12-2002, 11:35 PM

Dude thanks for warning us about that.

morphius · #9 05-13-2002, 12:24 AM

I appreciate this warning, a virus can be very damaging............

***Alcar*** · #10 05-13-2002, 04:18 AM

:

Originally posted by Melvin:squeeking paramite
I got:

Hi,This is a humour game
This game is my first work.
You're the first player.
I expect you would enjoy it.

from a muxamar person.... Weird. Hey, I just clicked the name Muxamar... and it's Alcar....

What the!

I haven't sent anything to you or Danny, ever. Are you sure you got the spelling correct? And anyway I would not send anyone a virus im not stupid, i hate viruses.

I think i might just go and change my password, as a friend of mine said he knew my password, but i never believed him...

Alcar...

abe333 · #11 05-13-2002, 05:27 AM

ANYONE WHO SEND A VIRUS SHOULD DIE!
But i'm not afraid or scared at all about viruses! PFFFT!

Gatalus · #12 05-13-2002, 06:32 AM

Luckily I haven't yet recieved any of the aforementioned viruses, HOWEVER, I just apparently recieved one through MSN, I just opened a window to talk to a friend and all this stuff started scrolling down the screen and then gave me a message from the MSN Support Staff saying I got a virus called Micro$oft and I should delete the program. So I did. Anybody else got this one?

Teal · #13 05-13-2002, 07:54 AM

Well, I got one from "dragonzone" (Rach's old email) titled "Alla erbjudanden" - it was empty, but as I know Rach doesn't email me strange words anyway...

I just delete everything if I don't recognise the email or it doesn't have a vaguely sensible title that gives me some clue as to what the hell it's about. *shrugs* (Although those entitled "Grow your penis by 30%!" (Why I'd want that, as I'm a woman, is beyond me) and "Free Uni diplomas!" get deleted without being opened as well...

)

Anyone know who "olpha32@hotmail.com" is? As he sent me an email asking ME what the "Special Nice Game" was - he'd apparently got it from my email address, which is weird as I hadn't even heard of the thing until he emailed me about it.

Seeing this thread makes me wonder if it's the Oddforums email list being used to send the virus out to people...?

Edit: As if to confirm my suspicions, I just got one from "Fazerina" (Yes, I know it was unlikely to be the real one.

) entitled "background" that was also empty..., although it was an 117k file, rather than just 1k (I have a friend that persistently sends me blank emails just to see if I'm there as he can't use IM on the computers at his Uni (Lampyland), although they're not always blank and I'm usually deleting the un-blank ones by mistake... doh)

Edit 2: Cheese? Who me? *sneaks off with big old chunk of edam*

Sl'askia · #14 05-13-2002, 08:48 AM

Geez I hope its not the oddforums itself infected...would make sense though...as I got a strange email from Black Dragon's old addy...Pilot you might want to check in on this...

pinkgoth2 · #15 05-13-2002, 11:58 AM

Probably not Oddworld Forums. Wouldn't know how a php file could get infected and send out emails.

I didn't get one. I just think it's the usual "send over address book" thingy. v_v Will they ever think of something else? *sigh*

- TyA

MudokonOddball · #16 05-13-2002, 02:16 PM

Oh no, oh no, oh no!

The mentioned virus using everyone else's screenname is called a "Trojan" virus. Very bad, and it sends itself to everyone in your address book! (or something like that

) Anyways, it can be really vicious, and I've only gotten ONE really bad virus.

That virus was at least a little creative, as it had a little cattapiller(sp) eating my screen as it destroyed my hard drive...

Anyways, if you have recieved one of these emails from a "friend" listed in your addy, delete your address book and write it down!
Again, thanks Rach for the heads up! *is glad he has McCaffe, VirusScan and Vshield.

:Þ *

Fazerina · #17 05-13-2002, 03:23 PM

When I checked my e-mail yesterday, there was a post from Erik (dark_xinos) and there wasn't any text in it, just an attachment. And because I'm too lazy [read=stupid] to run a virus scan for everything I download, I didn't do it this time either, but F-Secure said immediately that there was a virus in our computer and I deleted it. This is weird. Maybe it has something to do with the forums, then...

:

Originally posted by Teal
As if to confirm my suspicions, I just got one from "Fazerina" (Yes, I know it was unlikely to be the real one. )

Well, how come? It could have been me getting back at you for stealing my cheese...

EDIT: I got it again. This time it was titled "Honey". Though the name was already so suspicious that I wasn't even going to open it at first...

Jacob · #18 05-13-2002, 05:32 PM

Trojan doesn't do the email thing. It just allows people (Hackers) to get into your computer and control it.

MudokonOddball · #19 05-13-2002, 07:36 PM

:

Originally posted by Jacob
Trojan doesn't do the email thing. It just allows people (Hackers) to get into your computer and control it.

Actually, those are called Proximities. Trojans ARE viruses that are sent to every other email address stored on your computer. Hence the name like in Homer's Trojan Horse story.

Maybe I'm just being gullible like Doug and your just joking....:P

Melvin:squeeking paramite · #20 05-13-2002, 07:40 PM

:

Originally posted by Alcar

What the!

I haven't sent anything to you or Danny, ever. Are you sure you got the spelling correct? And anyway I would not send anyone a virus im not stupid, i hate viruses.

I think i might just go and change my password, as a friend of mine said he knew my password, but i never believed him...

Alcar...

Yes, when I clicked on it, it opened an MSN conversation with you. You were offline, so I couldn't talk to you... I don't think you would do a thing like this. I just got a blank email entitled " So cool a flash,enjoy it" from a janne-barbro person... Weird.

Jacob · #21 05-13-2002, 08:21 PM

:

Actually, those are called Proximities. Trojans ARE viruses that are sent to every other email address stored on your computer. Hence the name like in Homer's Trojan Horse story.

Ive used Trojans and u can get types which hack the comp.

Sl'askia · #22 05-13-2002, 08:31 PM

Just about any kind of virus can transmit itself via email; whether its a trojan, logic bomb, worm, etc. The most dangerous kind (the name escapes me at the moment) are the ones that actually seek out and destroy your anti-virus software...

***Alcar*** · #23 05-14-2002, 04:24 AM

I was speaking with Teal last night, this very subject popped up in conversation.

Like i said to her, PHP is very early in its years of being around, and is prone to hackers and viruses, but its not able to send out emails using that persons email address. And anyway the email function fo the forums has been disabled.

The only way 'I' can see how this is being done is someone has some sort of program that allows them to use someones email address, and that the person doing this is on THESE FORUMS, but all you smart people would have already figured that out

Alcar...

Sl'askia · #24 05-14-2002, 08:53 AM

Well either someone who is on the forums either got the email list (I don't show off mine) of those who joined, or it could be a hacker, or it the known 'victims' were all justpure conwinidence(sp)(no I can't spell worth beans...)

Sl'askia · #25 05-14-2002, 09:11 AM

*growls* I got it again...this time the subject was

'so cool a flash, enjoy!'

I made note of who it was from...a 'Mr_ian89' (first one was from a 'rik...something'.

Teal · #26 05-14-2002, 10:29 AM

I keep getting the silly thing under a variety of addresses. And I don't think it's using things like people's buddy lists in IM (ugh, "buddy" - hate the word *shudders*) as I've had the virus from people I don't even know, but found their email addresses on the forums...

(And Alcar, I already said to you that I never meant I thought it was coming direct from the forum server, I just said I thought someone had accessed the forums email list somehow, as the only connection I could see was that they were all OF email addies I was getting the virii from. (actually, I haven't had the virus, just lots of empty mails. Maybe the Uni firewall is stopping it getting through, although I didn't think it worked for hotmail... never mind.) So there, you evil rumour-spreader, you! Trying to make people think I'm stupid, whatever next...

)

dark_xinos · #27 05-14-2002, 01:14 PM

Av hemsida? That is in sweedish (means: from website).
Stupid evil sweeds... ehrm. Those guys i mean.

pinkgoth2 · #28 05-14-2002, 02:03 PM

"The only way 'I' can see how this is being done is someone has some sort of program that allows them to use someones email address, and that the person doing this is on THESE FORUMS, but all you smart people would have already figured that out"

That's silly. It doesn't have to have anything at all to do with the forums. It may've come from a poor guy who ticked off a hacker in the far region of a country you've never even heard of, but who had the email of your friend's friend's friend... if you see my point.

Especially since you guys seem to rely a lot on MSN Messenger. Not sure, but doesn't MSN also send the email addys to your address book? I thought it did, which would explain why people are getting emails from people they never had actualy email contact to, but wanted to chat with (maybe even never saw the other person online). Or vice versa.

Anyway, I don't think it's anyone on this board's fault.

- TyA

Black Dragon · #29 05-14-2002, 05:20 PM

Yep, I thought I hadn't received any of these bogus emails until I decided to check my junk mail folder this afternoon. It appears that I've recieved messages from Eddie about a Spice Girls' concert and one from Jess that reads "Please try again" in the subject. I haven't opened them, but I'm almost 99% positive that they're one of these freaky emails. Hotmail has been automatically deleting them for me. Something odd is going on... as all the ones I've received are from the forums.

Fazerina · #30 05-14-2002, 05:41 PM

I just got a third one today... It was from "Erik" again. The subject was "Japanese girl VS playboy". I opened it and it was the same one again. No text, just the attachment...