PDA

View Full Version : strange emails...virus?


jason
July 23rd, 2001, 01:21
lately i've been getting emails from various places all saying the same thing:
Hi, how are you?
i send you this file in order to have your advise. See you later. Thanks
then there is an attachment like eyechart.zip.Ink

they usually end in .Ink i never tried to access the files but i don't know what the hell they are or why i am getting them. i have gotten like 10 so far, some in spanish. anyone else getting these? norton didn't pick them up as being virus ridden but my virus program is kinda outdated.
gyrbo
July 23rd, 2001, 05:30
Just viruses. Don't open them, just remove.
polestar
July 23rd, 2001, 05:34
*.Ink is a windows shortcut file isn't it? It can't do any damage on its own - only files like .exe, .bat and .com can do that.

I'm curious what the shortcut links to.....but not so much that I'd advise downloading it!

My guess is it's a link to a website for your desktop.
LastActionHero
July 23rd, 2001, 06:24
It's the W32.Sircam worm doing the rounds these days on the net.
Read more here -> http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html
meow
July 23rd, 2001, 07:00
Polestar - that was long ago. They can be ----in' anything now. Most of mine have been .scr
This one names itself thus:
--------------------------------
http://www.ca.com/virusinfo/encyclopedia/ --->Win32.SirCam.137216
The attachment name is variable, but will have a double extension, for example "SCRIPT.DOC.PIF". The actual extension may be "PIF", "LNK", "BAT", "EXE" or "COM". The subject of the message matches the attachment name, except without the extensions.
------------------------------
lucifer
July 23rd, 2001, 07:25
they seem popular I got about 10 this weekend. Never seen them before all from a john thomas which made me suspicious
Weapon
July 23rd, 2001, 07:40
Originally posted by lucifer
they seem popular I got about 10 this weekend. Never seen them before all from a john thomas which made me suspicious :D :D thats what you guys get for calling me weeps:D
Coolin
July 23rd, 2001, 12:22
You're John Thomas?
LastActionHero
July 23rd, 2001, 12:29
Originally posted by Coolin
You're John Thomas?

ROFL :D
niv
July 23rd, 2001, 12:42
what up w33ps? ;)
Coolin
July 23rd, 2001, 12:53
MuH g05u 31337 h4x0r1nG 5p33cH SuX m0r3 d4N y0uRs!
MUWHAHAHAHAH!
niv
July 23rd, 2001, 13:01
Originally posted by Coolin
MuH g05u 31337 h4x0r1nG 5p33cH SuX m0r3 d4N y0uRs!
MUWHAHAHAHAH!

i u5u4ll`/ d0n'7 g0 a5 e><7123m3 a5 t|¬47 ;)
LastActionHero
July 23rd, 2001, 13:03
Lamers :rolleyes: ;)
lucifer
July 23rd, 2001, 13:05
|3t5 p|3à5è nÒT G3t ßáÇk 1N2 Ä|L th1$ |Åmë 7â|k @gãìn. ï7 hÃ5 bn 5ö ñ1ÇÈ zP3ÑÐÌng Tím3 hêrÊ W1tHøùT hävÎn6 2 MîNut3£¥ 5Çru101zÉ éÁÇh ÇhårÀÇtËR Óf 5Øm31$ pó57 Ín 7h3 hÖp3 TH@t ÏT m1ght 1n 5ômè wÂý 8 ìñ4màtïv3. PlëázÈ P|3Ä53 P£êÅ5Ê ÇâÑ w3 nÔ7 g0 d0Wn 7h1$ ®ÕÚTÉ @6ãÌN
Coolin
July 23rd, 2001, 13:17
Not that colour thing again...
Darn. I forgot the website.
lucifer
July 23rd, 2001, 13:36
Originally posted by Coolin
Not that colour thing again...
Darn. I forgot the website. ¥35 1t'5 Thàt Ðárn ÇÒ|öùr th1NG ÄgÅìn. Ju$7 Wh3n u 7HøÚghT ït wÓz 5âfè 2 r3@d Thë ßØãRd5 thÈ®3 1t Ìz Ã6äíñ |1k3 5ómê ÐÖg 5hÎ7 7hÁT ú FîÑd ôn ur $HÔÊ but 0n|ý åfT3r U hÀvÉ w@LkéD Â|| R0ûNÐ Ûr hÕü5Ë. hà há hÄ mÅy 1t 8 â ÇÙr53 Üpõn ù @£l
LastActionHero
July 23rd, 2001, 13:43
Originally posted by lucifer
¥35 1t'5 Thàt Ðárn ÇÒ|öùr th1NG ÄgÅìn. Ju$7 Wh3n u 7HøÚghT ït wÓz 5âfè 2 r3@d Thë ßØãRd5 thÈ®3 1t Ìz Ã6äíñ |1k3 5ómê ÐÖg 5hÎ7 7hÁT ú FîÑd ôn ur $HÔÊ but 0n|ý åfT3r U hÀvÉ w@LkéD Â|| R0ûNÐ Ûr hÕü5Ë. hà há hÄ mÅy 1t 8 â ÇÙr53 Üpõn ù @£l

The third lamer joins in the party :rolleyes:
Coolin
July 23rd, 2001, 13:44
Kill it!
gyrbo
July 23rd, 2001, 14:38
1 fÒùnÐ à N1Ç3 5ìt3 Thát döè5 thï$! :D

I found a nice site that does this! :D
LastActionHero
July 23rd, 2001, 14:39
Not one more! :rolleyes:
meow
July 23rd, 2001, 17:03
Kids. :rolleyes:
:D
Coolin
July 23rd, 2001, 21:08
Originally posted by meow
Kids. :rolleyes:
:D I believe you are the owner of that site?

Or am I mistaken?
meow
July 23rd, 2001, 21:17
:confused: Huh? One of the script sites? Nope.
Coolin
July 23rd, 2001, 21:22
Then I must have been mistaken.
meow
July 23rd, 2001, 21:32
lol! Yeah. The only scripting I know a little about is not for the web. I'm happy if I can install them and if I can change them I roll on the floor and giggle. Oh, I can do a JavaScript rollover without peeking!:p
meow
July 24th, 2001, 03:11
:eek: Hey, this virus (the TOPIC) is worse than it first sounded.

The Sircam worm-virus infects and then mass-mails random documents from other people's computers to yours. If you use Windows, it may delete all the files on your hard drive. In other operating systems it appears to be harmless. Attached files may be enormous, and if you're on a dial-up connection, you can lose hours watching these unsolicited multi-megabyte attachments crawl down the pipe to your hard drive
Article &nbsp; &rarr; &nbsp; http://www.wired.com/news/technology/0,1282,45427,00.html?tw=wn20010720
polestar
July 24th, 2001, 06:41
Meow:

Most of mine have been .scr

do you mean windows shortcut files, or virus files?

also, is it safe to d/l the attachment, or does this very action infect your pc?

These idiots who make viruses could put their obvious talent to better use - why not make programs, or at least crack them? :confused: They're not impressing anyone by creating viruses.
lucifer
July 24th, 2001, 06:44
Originally posted by polestar
also, is it safe to d/l the attachment, or does this very action infect your pc?downloading them is ok it's just if you run them that you get infected.
meow
July 24th, 2001, 07:15
Originally posted by polestar
[B]Meow: do you mean windows shortcut files, or virus files?

They have been virus alright. .src is a screen saver file. Which they of course were not.

The ones I've got have been easy to avoid. My AV seems very good and have detected all of them as soon as I open the mail. But even if it hadn't I wouldn't have fallen for them because they all had really silly messages. I got one called snowhite surely 7 or 8 times last winter. And one called "Naked Wives" several times too. They try too make you believe there's something sexy in the attachment.

Your virus attaches whole files. They can also take snips from the victims files and past into the message. No more than 3 or 4 words make any sense. A nonsense message like: "January Income grandmother's new hearing aid 10.974 765.30 California, Utah..."

For your reading pleasure:
*****************************
X-Auth-OK:
From: Hahaha <hahaha@sexyfun.net>
Subject: Snowhite and the Seven Dwarfs - The REAL story!

Today, Snowhite was turning 18. The 7 Dwarfs always where very educated and polite with Snowhite. When they go out work at mornign, they promissed a *huge* surprise. Snowhite was anxious. Suddlently, the door open, and the Seven Dwarfs enter...

[]midgets.scr