Virus. WTF? - GoFuckYourself.com - Adult Webmaster Forum

X

boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#1

Virus. WTF?

04-20-2002, 12:13 AM

Some bot is using my email address to send viruses to people.

I get a shitload of them sent to me with a return address of [email protected] as well.

I also get all these "Undeliverable mail" messages saying this email has a virus and cannot be delivered to recipiant.

Fuck! somethingis sending out these things using my email address as the sender info. WTF?

I know my email isnt sending this shit out, cause I dont use outlook, and al my domain email is forwarded to a yahoo account. So the emial addresses these viruses say they are from dont really exist. They only exist on my websites as contact emails, so some bot must have spidered my email address off my site and is fucking using my address to send viruses.
WTF?

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Tags: None
Hot Tropical Babes

Confirmed User

Join Date: Feb 2001

Posts: 3014
Share

Post
#2

04-20-2002, 12:14 AM

I have been getting that also, for the past week! It fucking SUCKS

<BR>
Trade with Big Tits TGP
Trade with Titman
Comment
chodadog

Confirmed User

Join Date: Apr 2002

Posts: 9736
Share

Post
#3

04-20-2002, 12:14 AM

Or some malicious fuck it out to tarnish your name. Sad really. Lame fuckers

26 + 6 = 1
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#4

04-20-2002, 12:15 AM

are they from your own domain? As if they are sent to people with your email address?

Heres one i got just 3 seconds ago:

Note: This is an automated message sent from the Canwest Interactive
mail
system.

We rejected an email message because it either contained a virus or
contained a file attachment with a "dangerous" extension.

Unknown infected with HTML/MimeExploit.IFRAME (CA(InoculateIT),CA(Vet))
virus. The file is currently Removed. The message, "Japanese girl VS
playboy", was sent from admin .

Due to a dramatic increase in email viruses, Canwest Interactive now
blocks
email that has attachments with any one of the following file
extensions:

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
Fletch XXX

GFY HALL OF FAME DAMMIT!!!

Join Date: Jan 2002

Posts: 60840
Share

Post
#5

04-20-2002, 12:15 AM

Most people would know any email addy acquired through a virus share would be bogus man... anyone who knows ya wouldnt think this.

Want an Android App for your tube, membership, or free site?

Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#6

04-20-2002, 12:16 AM

a lot of these emails are just blank. Noting in em.
Just a subject heading to me, from me.

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#7

04-20-2002, 12:16 AM

looks like its even trying to send it to my buddies.

The following mail can't be sent to [email protected]:

From: [email protected]
To: [email protected]
Subject: ismap alt
The attachment is the original mail

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
4Pics

Confirmed User

Join Date: Dec 2001

Posts: 7952
Share

Post
#8

04-20-2002, 12:16 AM

Post the message headers
Comment
Hot Tropical Babes

Confirmed User

Join Date: Feb 2001

Posts: 3014
Share

Post
#9

04-20-2002, 12:17 AM

yeah four of my domains, I have also gotten the same email from other "webmasters" I know

<BR>
Trade with Big Tits TGP
Trade with Titman
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#10

04-20-2002, 12:19 AM

The retuen email addresses involved here are ALL emials ive used on my website for contact info.
I dont give or use these addresses for anything else, so it has to be a spider.

Emial addresses like: courtney at boneprone.com
and rates at boneprone.com arent used for anything else. In fact the emails dont exist, like i siad i have the forwarded to a yahoo account, so email can never really be sent from this address.

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#11

04-20-2002, 12:19 AM

this is also a common one:

This is a nice game
This game is my first work.
You're the first player.
I wish you would like it.

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
Hot Tropical Babes

Confirmed User

Join Date: Feb 2001

Posts: 3014
Share

Post
#12

04-20-2002, 12:21 AM

yep, Bone, I get the same thing
I cant post it, because I delete it as they come in.

one was a iframe exploit

<BR>
Trade with Big Tits TGP
Trade with Titman
Comment
nocostporn

Confirmed User

Join Date: Mar 2002

Posts: 5228
Share

Post
#13

04-20-2002, 12:23 AM

I got it too "mail undeliverable"...they had to have got the email addresses from here because I'm getting them at my @aol mailbox and this is the only place that email address would exist...

CashTheChecks.com -coming soon-
"Exclusive sites for Exclusive Webmasters"
ICQ-119966868,add me first don't message
Comment
^R3K^

Confirmed User

Join Date: Sep 2001

Posts: 2815
Share

Post
#14

04-20-2002, 12:23 AM

Sounds like it might be W32.Klez.E@mm or a varient of it, it runs its own small SMTP engine and spoofs headers. Believe me this little worm is fucking smart. It had ME offline for a few days tracking the little shits footprints around my machines. not a good thing ;-)

no business like ho business

Http://www.natnet.com
No Hype, Just Results
Comment
^R3K^

Confirmed User

Join Date: Sep 2001

Posts: 2815
Share

Post
#15

04-20-2002, 12:26 AM

Originally posted by boneprone
this is also a common one:

This is a nice game
This game is my first work.
You're the first player.
I wish you would like it.

Yep that's Klez :D

no business like ho business

Http://www.natnet.com
No Hype, Just Results
Comment
chodadog

Confirmed User

Join Date: Apr 2002

Posts: 9736
Share

Post
#16

04-20-2002, 12:27 AM

Originally posted by boneprone
a lot of these emails are just blank. Noting in em.
Just a subject heading to me, from me.

I've been getting a crapload of emaisl like that actually.. blank, no attatchemnts, but they're over 100k in size! WTF!!

26 + 6 = 1
Comment
^R3K^

Confirmed User

Join Date: Sep 2001

Posts: 2815
Share

Post
#17

04-20-2002, 12:31 AM

The engine works like this, lets say Lensman is infected with Klez, but boneprone isnt, it scans lensmans address book and finds boneprones and my e-mail addreses, it will then send spoofed e-mail from boneprone to me (from lensmans machine) ill go to bone and say, hey you sent me a virus, but when bone scans his machine he isnt infected, lensman is.. see.. sneaky little fucker, huh?

no business like ho business

Http://www.natnet.com
No Hype, Just Results
Comment
drunkmonkey

Confirmed User

Join Date: Feb 2002

Posts: 799
Share

Post
#18

04-20-2002, 12:34 AM

Originally posted by ^R3K^
Sounds like it might be W32.Klez.E@mm or a varient of it, it runs its own small SMTP engine and spoofs headers. Believe me this little worm is fucking smart. It had ME offline for a few days tracking the little shits footprints around my machines. not a good thing ;-)

alot of them have been mutated to run completely off IRC now. Almost impossible to track down.

The security industry has turned commercial and the bad guys are gaining a very big head start. CERT has had an "incident report" submission for a while but CERT sucks ass. They solve nothing and are always waaaaaaay behind. Securityfocus is dead but BUGTRAQ is still alive. All unusual incidents should be sent to [email protected]

It is a mailing list for nothing but security specialists. They eat this stuff for breakfast. But they have to know it is there to eat it.
Comment
boneprone

Hall Of Fame

Join Date: Jan 2001

Posts: 34415
Share

Post
#19

04-20-2002, 12:38 AM

well its here.
This sucks.
People's email boxes are getting full!

Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.
Comment
^R3K^

Confirmed User

Join Date: Sep 2001

Posts: 2815
Share

Post
#20

04-20-2002, 12:39 AM

Whats BUGTRAQ? J/K

And CERT still kicks ass, you just dont know who's ass they are kicking.

Yeah i sent in white papers yesterday on all the movements, footprints, and evolvs that i saw on my machine.

no business like ho business

Http://www.natnet.com
No Hype, Just Results
Comment
drunkmonkey

Confirmed User

Join Date: Feb 2002

Posts: 799
Share

Post
#21

04-20-2002, 12:45 AM

Originally posted by ^R3K^
Whats BUGTRAQ? J/K

And CERT still kicks ass, you just dont know who's ass they are kicking.

Yeah i sent in white papers yesterday on all the movements, footprints, and evolvs that i saw on my machine.

good deal. The internet kicks ass. Let's keep it that away

However, I have to disagree about CERT. I have found CERT to be totally inadequate. Typical Gov. workers.
Comment
^R3K^

Confirmed User

Join Date: Sep 2001

Posts: 2815
Share

Post
#22

04-20-2002, 12:56 AM

Originally posted by drunkmonkey

good deal. The internet kicks ass. Let's keep it that away

However, I have to disagree about CERT. I have found CERT to be totally inadequate. Typical Gov. workers.

We will have to agree to disagree on CERT, i know they have always take the time to go over my papers and send comments back.. it had been a year before these sent i had contact with them, but i think they are still solid.

no business like ho business

Http://www.natnet.com
No Hype, Just Results
Comment
PersianKitty

Meow Media Inc.

Join Date: Jul 2001

Posts: 7785
Share

Post
#23

04-20-2002, 12:57 AM

I've been dealing with it too. I see emails from me to me or from one of my email addys to another one, but the header shows it comes from somewhere else completely. I also get notices that "I have sent someone a virus that wasn't delivered" but I run Nortons AV several times a week and it's always clean.

I've figured it's some virus or trojan that not only collects email addys from cache to send out to, but also uses those cached addys as fake senders.

After Sircam it's a total pain to have an email addy on a website. Since last summer I've had to resort to scanning headers only and deleting everything but emails I know should be clean.

Wondering what webmaster programs PK uses? Check them out here!
Comment
Pathfinder

theking of trailer parks

Join Date: Sep 2001

Posts: 2290
Share

Post
#24

04-20-2002, 01:03 AM

I received about a half dozen of them yesterday; it being 2:06 AM my time. Norton antivirus caught all of them. Yesterday was the first day I received them, saying E-mail I had sent was undeliverable, because it contained a virus, but I did not send the E-mails. Norton identifies those E-mails as being a virus; I didn't write down the name of the virus.
Comment
Pathfinder

theking of trailer parks

Join Date: Sep 2001

Posts: 2290
Share

Post
#25

04-20-2002, 01:18 AM

Question:

Are these E-mail viruses ever traced down by anyone, anywhere, and if so, what is done to these people?
Comment
geffec

Registered User

Join Date: Apr 2002

Posts: 5
Share

Post
#26

04-20-2002, 01:19 AM

Originally posted by chodadog

I've been getting a crapload of emaisl like that actually.. blank, no attatchemnts, but they're over 100k in size! WTF!!

The attached file isn't visible, but still there, if you open the email you open the file [virus] too....real shitty !!
At http:www.majorgeeks.com u can download a little free program called Ad-Aware , that program deletes all your Spy-ware, i even found 47 spyware files in kazaa, and 182 in my entire PC. All SpyWare, and run to the store for a good AV !!
Run a scan, delete the infected files, and your ready to go again !
Sorry for my shitty english im 14 yrs old :P and skipping every class i have :D

_______________
If this post isn't spam, ur probably reading it wrong
Comment
geffec

Registered User

Join Date: Apr 2002

Posts: 5
Share

Post
#27

04-20-2002, 01:27 AM

Originally posted by Pathfinder
Question:

Are these E-mail viruses ever traced down by anyone, anywhere, and if so, what is done to these people?

My dad runs a couple of website's and sometimes he gets an email from a website visitor with a virus in it. Last time he traced down the guy's IP, and send the whole package to the Police, and the guy's internet provider. The guy's internet immediatly shut down, and he got picked up by the cops.
He had to stay in jail for 3 months and [i dunno a proper word] got a 'ticket' to pay ?5000 to the cops.
And...he's on some black list or something, he never gets an internet connectian again in the whole country of The Netherlands.

_______________
If this post isn't spam, ur probably reading it wrong
Comment
geffec

Registered User

Join Date: Apr 2002

Posts: 5
Share

Post
#28

04-20-2002, 01:30 AM

Originally posted by Pathfinder
I received about a half dozen of them yesterday; it being 2:06 AM my time. Norton antivirus caught all of them. Yesterday was the first day I received them, saying E-mail I had sent was undeliverable, because it contained a virus, but I did not send the E-mails. Norton identifies those E-mails as being a virus; I didn't write down the name of the virus.

Norton AV and McAfee are the best AV around !
I have Norton AV 2002 , with all the updates.
In 3 yrs i never had a virus on my PC, all tnx to norton

_______________
If this post isn't spam, ur probably reading it wrong
Comment
jimmyf

OU812

Join Date: Feb 2001

Posts: 12651
Share

Post
#29

04-20-2002, 05:12 AM

I took all my email address off my site's that refer to any of my domain's some time ago..
And use a Yahoo one...
There is a file you can download to check just for this virus, worm, or Trojan.

http://securityresponse.symantec.com...oval.tool.html

Virus are not why I took my email address's off my site's... It's because some ass hole spammer used one as there return address and I was getting 500+ bounced email per day...

Epic CashEpic Cash works for me
Solar Cash Paysite Plugin
Gallery of the day freesites,POTD,Gallery generator with free hosting
Comment
FreeOnes

Confirmed User

Join Date: Jul 2001

Posts: 3406
Share

Post
#30

04-20-2002, 05:15 AM

Boneprone read this man:

"Because this worm does use a randomly chosen address that it finds on an infected computer as the "From:" address, numerous cases have been reported in which users of uninfected computers receive complaints that they have sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using a antivirus program or does not have current virus definitions. When W32.Klez.E@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From:" line of an infected email that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her infected email, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.

If you are using a current version of Norton AntiVirus, have the most recent virus definitions, and a full system scan with Norton AntiVirus set to scan all files does not find anything, you can be confident that your computer is not infected with this worm.

There have been several reports that, in some cases, if you receive a message that the virus has sent using its own SMTP engine, the message appears to be a "postmaster bounce message" from your own domain. For example, if your email address is [email protected], you could receive a message that appears to be from [email protected], indicating that you attempted to send email and the attempt failed. If this is the false message that is sent by the virus, the attachment includes the virus itself. Of course, such attachments should not be opened"

Read more here: http://[email protected]

The new FreeOnes! - AdultFilmStarContent - BabeGalleries and much more! - 1Strike Movies and much more! All powered by Xpressa
Comment
Forkbeard

Confirmed User

Join Date: Feb 2002

Posts: 2236
Share

Post
#31

04-20-2002, 08:42 PM

It had ME offline for a few days tracking the little shits footprints around my machines.

Yah, me too. Klez is one nasty little piece of shit.

Klez....

Offering sponsored blog posts and custom writing services.
Comment
xxxice

Confirmed User

Join Date: Feb 2002

Posts: 5042
Share

Post
#32

04-20-2002, 09:54 PM

Here is all the info you need about the virus to avoid confusion

http://[email protected]
Comment
kenny

Confirmed User

Join Date: Mar 2002

Posts: 7245
Share

Post
#33

04-20-2002, 10:09 PM

You would think someone with the knowledge to program a virus like that would use their knowledge for something constructive and legal.

7
Comment

Previous template Next

Working...