Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


Virus!

Reply to topic
Bike Chat Forums Index -> General Bike Chat
View previous topic : View next topic  
Author Message

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 17:12 - 14 May 2002    Post subject: Virus! Reply with quote

Someone on here, probably someone who has emailed me at some point has got the w32.klez.h@mm virus. I've throughly scanned my comp with the tool on the mentioned page and it's definatley not on mine... I also permantly run a firewall and Virus checker.

I know it's from this site because it is addressed to nsr@giffould.com, which I use specifically for this site (for spam protection reasons).
 Back to top
View user's profile Send private message You must be logged in to rate posts

McJamweasel
BCF Junkie



Joined: 22 Mar 2002
Karma :

PostPosted: 20:57 - 14 May 2002    Post subject: Reply with quote

Not me then, cuz Ive never mailed you and I dont use an address book.
____________________
BCF: Be yourself, just don't be an arse.
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

Kickstart
The Oracle



Joined: 04 Feb 2002
Karma :

PostPosted: 22:11 - 14 May 2002    Post subject: Reply with quote

Hi

I hope you did not run an attachment that is floating round claiming to be the cure for that virus? If so the "cure" is actually a virus

All the best

Keith
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 22:27 - 14 May 2002    Post subject: Reply with quote

No the 'cure' was from a link from the Symantec website... it's a possibility it could have been hacked, but incredibly unlikley
 Back to top
View user's profile Send private message You must be logged in to rate posts

TJ NSR
World Chat Champion



Joined: 03 Feb 2002
Karma :

PostPosted: 22:50 - 14 May 2002    Post subject: Reply with quote

ive been getting all these emails with attachments (virus), saying NSR in the from line, or ive got a new nsr... etc

theres also some prick on this site sending viruses out on purpose!!


JUST To fukin tell u, little kunt,

ive got an antivirus check upto date and a firewall, u wont get me, and if i find u i chop ur bollocks up and serve them to u on a plate.

piss off please it aint funny..

any1 else getin the same thing?
 Back to top
View user's profile Send private message You must be logged in to rate posts

Korn
Admin



Joined: 01 Feb 2002
Karma :

PostPosted: 23:21 - 14 May 2002    Post subject: Reply with quote

Not sure if it's this Klez one but there's a virus going around that takes email addresses from your temporary internet files, address book etc and uses them as the from address when it spreads - so the person who's address is on the email probably isn't the one who sent it.
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

zaknafien




Joined: 25 Mar 2002
Karma :

PostPosted: 00:30 - 15 May 2002    Post subject: Reply with quote

the klez virus basically get's on your machine by disabling your virus checker if it can, then it pulls email address's from your address book, temporary internet folder and any text files on your machine that contain e-mails. After thats done it sends a mail out to every address it's just pulled (there will be no record of this in your mail client) but it spoofs where it's come from by replacing the address with one it's just pulled from your PC so you cant track the infected PC.

Only way to get rid of it is

1.Delete every mail on your machine with an attachment
2.Get the fix from Symantec website
3.Shutdown your machine for 30 sedconds minimum (otherwise it could still be in virtual memory)
4.Restart your machine in Safe Mode
5.Run the Fix
6.Restart and hey presto your clean Smile

Zak
____________________
02 Firestorm.
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 07:36 - 15 May 2002    Post subject: Reply with quote

Some of the mails I've been getting have reffered to RS125 & RS250 email address so anyone that's been on a RS forum recently should check for virus's.
After sticking this email address up ^ there I just recieved some spam to it, I assume they were useing a mail-bot to collect it so I shall probably forward all my nsr @ giffould.com emails to them and make a new account for here.

btw. TJ, I have recieved an email purporting to be from you, which would suggest it's the same viruis that's doing it.
 Back to top
View user's profile Send private message You must be logged in to rate posts

feef
Energiser Bunny



Joined: 11 Feb 2002
Karma :

PostPosted: 10:13 - 15 May 2002    Post subject: W32/Sircam Reply with quote

Kornel wrote:
Not sure if it's this Klez one but there's a virus going around that takes email addresses from your temporary internet files, address book etc and uses them as the from address when it spreads - so the person who's address is on the email probably isn't the one who sent it.


That one is w32/Sircam...

One of my personal favourites..

Emails a document from your My Documents folder (which it infects) to random people in your Address books, and any email addresses it finds on temporarty internet files. It can also infect via shared network drives. But the celever bit is that it has it's own Email server, so you never SEE the emails getting sent (and they don't appear in the "sent items" of oulook (if you're daft enough to use it)), until you start getting flamed by all and sundry...

It's Idenfiied by it's bad English in the message content, usually somrthing like

"Hi,

I send you this to have your opinion"

a
____________________
Mudskipper wrote: feef, that is such a beautiful post that it gave me a lady tingle Laughing
Windchill calculator - London Bike parking
Blog and stuff - PlentyMoreFish dating
 Back to top
View user's profile Send private message You must be logged in to rate posts

Kickstart
The Oracle



Joined: 04 Feb 2002
Karma :

PostPosted: 19:38 - 15 May 2002    Post subject: Reply with quote

G wrote:
Some of the mails I've been getting have reffered to RS125 & RS250 email address so anyone that's been on a RS forum recently should check for virus's.


Hi

On the RS125 mailing list someone sent a message last week, with an attachment called kitty.bat. 90% certain it was a virus, especially as this "bat" file was a Visual C++ exe. Since then about once a day there there have been messages of about 170k with strange names.

All the best

Keith
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

Dylan
Trackday Trickster



Joined: 03 Feb 2002
Karma :

PostPosted: 21:27 - 15 May 2002    Post subject: Reply with quote

Can you get the virus by opening the e mail, or only by downloading the attatchment???
All the best
Dyl
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 21:45 - 15 May 2002    Post subject: Reply with quote

The attachment tries to run itself when the email is opened in OE... mine comes up with a 'do you want to open or dave this file' dialouge box, but I think pre service pack w2K systems don't, just open it (don't know about other configurations/progs)
 Back to top
View user's profile Send private message You must be logged in to rate posts

Dylan
Trackday Trickster



Joined: 03 Feb 2002
Karma :

PostPosted: 07:06 - 16 May 2002    Post subject: Reply with quote

Geez, hope mine dont download automaticaly. i know that picture files do. Normaly yahoo asks if i want to scan a text file first though. Is there a setting i can change to always ask me if i want to scan things???
Thanks
Dyl
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 07:11 - 16 May 2002    Post subject: Reply with quote

Are you viewing your email through a web browser?
 Back to top
View user's profile Send private message You must be logged in to rate posts

Dylan
Trackday Trickster



Joined: 03 Feb 2002
Karma :

PostPosted: 07:14 - 16 May 2002    Post subject: Reply with quote

Damn thats a quick reply!!!!
Yeah ime viewing it through IE 6
Thanks
Dyl
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

G
The Voice of Reason



Joined: 02 Feb 2002
Karma :

PostPosted: 07:17 - 16 May 2002    Post subject: Reply with quote

Shouldn't be a problem then... IT should ask you if anything tries to run any programs.
(just pooped on to have a quick look before I get ready to go to work)
 Back to top
View user's profile Send private message You must be logged in to rate posts
Old Thread Alert!

The last post was made 23 years ago. Instead of replying here, would creating a new thread be more useful?
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> General Bike Chat All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 

Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.46 Sec - Server Load: 7.3 - MySQL Queries: 13 - Page Size: 89.28 Kb