I think I have SO BIG friggin' worm figured out... - GoFuckYourself.com

Adult Site Traffic · 08-20-2003, 05:12 PM

I thought Norton was catching is, but it must have somehow gotten through.

I just got a bounced e-mail back that I didn't send, and the dam thing was attatched.

I heard it expires on September 10th.

It is now Saturday, September 20th on my machine.

Will that work? Changing the date? Won't it just expire?

Thanks,

Adult Site Traffic ICQ me? Click Here or E-mail me Here

NBDesign · 08-20-2003, 05:13 PM

I got a couple of those bounces too.. but my PC is clean.... These were sent with a spam mailer... according to the text rejection email I received...

Fucking spammers.

Adult Site Traffic · 08-20-2003, 05:16 PM

Mine said:

Your message

To: [email protected]
Subject: *****SPAM***** Re: That movie
Sent: Wed, 20 Aug 2003 15:49:22 -0400

did not reach the following recipient(s):

[email protected] on Wed, 20 Aug 2003 19:48:09 -0400
The recipient name is not recognized
The MTS-ID of the original message is: c=us;a=
;p=cbs;l=NYCHUBG010308202348RJQRC5V1
MSEXCH:IMS:CBS:HUB:NYCHUBG01 0 (000C05A6) Unknown Recipient

Maybe I'm still clean, because Norton is catching them still, I think.

Maybe that's the deal. But, will the date thing work?

AST

tranza · 08-20-2003, 05:19 PM

Quote:

Originally posted by NBDesign
I got a couple of those bounces too.. but my PC is clean.... These were sent with a spam mailer... according to the text rejection email I received...

Fucking spammers.

Nice to hear that, I also got some bounces too and was worried... (I have Norton installed and runnig though...)

NBDesign · 08-20-2003, 05:20 PM

Here is mine.... (edited xxxxx)

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

[email protected]
This message has been rejected because it has
a potentially executable attachment "details.pif"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.

------ This is a copy of the message, including all the headers. ------

Return-path: <[email protected]>
Received: from [<some Ip Number here>] (helo=MARCH27)
by reiger.vosn.net with esmtp (Exim 4.20)
id 19pcTM-0000IH-IZ
for [email protected]; Wed, 20 Aug 2003 17:34:37 -0600
From: <[email protected]>
To: <[email protected]>
Subject: Re: Details
Date: Wed, 20 Aug 2003 19:34:53 --0400
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_0030AA11"
Message-Id: <[email protected]>

This is a multipart message in MIME format

--_NextPart_000_0030AA11
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Please see the attached file for details. --_NextPart_000_0030AA11
Content-Type: plain/text;
name="Norton AntiVirus Deleted1.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Norton AntiVirus Deleted1.txt"

Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW 50OiBkZXRhaWxzLnBpZi4N
ClRoZSBhdHRhY2htZW50IHdhcyBpbmZlY3RlZCB3aXRoIHRoZS BXMzIuU29iaWcuRkBtbSB2
aXJ1cy4=
--_NextPart_000_0030AA11--

I do not use Outlook express... this could NOT have come from me.

rowan · 08-20-2003, 05:25 PM

Cmon guys, how long have you been webmasters?

Klez has been around for something like 1 1/2 years, and that forges source email addresses. This virus does the same, so if you get back a bounce complaining of a virus or bad attachment there's a good chance that the original email didn't come from your machine...

Adult Site Traffic · 08-20-2003, 05:41 PM

Quote:

Originally posted by rowan
Cmon guys, how long have you been webmasters?

Honestly, I don't know fuck about my own machine. I know, it's pretty sad, but if it wasn't for my wife, I probably wouldn't have virus protection, windows updates and damned sure not our office networking.

It sounds stupid, I know.

Gimme hardware, php, perl or apache, but not windows

Will the date thing work? Or no? Norton says it expires on September 9th..

AST

Dirty F · 08-20-2003, 06:13 PM

http://www.gofuckyourself.com/showth...hreadid=165851

Its so annoying, i for once make a decent post and nobody fucking reads it, yet everybody keeps posting the same question over and over again.

08-20-2003, 05:12 PM	#1
Adult Site Traffic Confirmed User Join Date: Mar 2003 Location: South-East of the Border of Disorder Posts: 5,093	I think I have SO BIG friggin' worm figured out... I thought Norton was catching is, but it must have somehow gotten through. I just got a bounced e-mail back that I didn't send, and the dam thing was attatched. I heard it expires on September 10th. It is now Saturday, September 20th on my machine. Will that work? Changing the date? Won't it just expire? Thanks, Adult Site Traffic ICQ me? Click Here or E-mail me Here __________________ ALL Domains and Websites are GOING AWAY NOW! Ask me! Many great domains, mainstream and adult, some complete sites with databases, some names with traffic and PR, some investment quality names. Come take a look! { Traffic Orders: Please go here } .:: SHARPEN the Elite - BURN the leftovers! Ooh-Rah!! ::.

08-20-2003, 05:13 PM	#2
NBDesign Confirmed User Join Date: Jan 2003 Location: The other side of Hell Posts: 5,814	I got a couple of those bounces too.. but my PC is clean.... These were sent with a spam mailer... according to the text rejection email I received... Fucking spammers. __________________ Use Lensman's program and get the most for your hard earned traffic. Get Heidi for your site Here. Lots of sets to choose from. She makes a great Addition to any site. Grab one Grab All.

08-20-2003, 05:16 PM	#3
Adult Site Traffic Confirmed User Join Date: Mar 2003 Location: South-East of the Border of Disorder Posts: 5,093	Mine said: Your message To: [email protected] Subject: ***SPAM* Re: That movie Sent: Wed, 20 Aug 2003 15:49:22 -0400 did not reach the following recipient(s): [email protected] on Wed, 20 Aug 2003 19:48:09 -0400 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=cbs;l=NYCHUBG010308202348RJQRC5V1 MSEXCH:IMS:CBS:HUB:NYCHUBG01 0 (000C05A6) Unknown Recipient Maybe I'm still clean, because Norton is catching them still, I think. Maybe that's the deal. But, will the date thing work? AST __________________ ALL Domains and Websites are GOING AWAY NOW! Ask me!** Many great domains, mainstream and adult, some complete sites with databases, some names with traffic and PR, some investment quality names. Come take a look! { Traffic Orders: Please go here } .:: SHARPEN the Elite - BURN the leftovers! Ooh-Rah!! ::.

08-20-2003, 05:20 PM	#5
NBDesign Confirmed User Join Date: Jan 2003 Location: The other side of Hell Posts: 5,814	Here is mine.... (edited xxxxx) This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: [email protected] This message has been rejected because it has a potentially executable attachment "details.pif" This form of attachment has been used by recent viruses or other malware. If you meant to send this file then please package it up as a zip file and resend it. ------ This is a copy of the message, including all the headers. ------ Return-path: <[email protected]> Received: from [<some Ip Number here>] (helo=MARCH27) by reiger.vosn.net with esmtp (Exim 4.20) id 19pcTM-0000IH-IZ for [email protected]; Wed, 20 Aug 2003 17:34:37 -0600 From: <[email protected]> To: <[email protected]> Subject: Re: Details Date: Wed, 20 Aug 2003 19:34:53 --0400 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_0030AA11" Message-Id: <[email protected]> This is a multipart message in MIME format --_NextPart_000_0030AA11 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Please see the attached file for details. --_NextPart_000_0030AA11 Content-Type: plain/text; name="Norton AntiVirus Deleted1.txt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Norton AntiVirus Deleted1.txt" Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW 50OiBkZXRhaWxzLnBpZi4N ClRoZSBhdHRhY2htZW50IHdhcyBpbmZlY3RlZCB3aXRoIHRoZS BXMzIuU29iaWcuRkBtbSB2 aXJ1cy4= --_NextPart_000_0030AA11-- I do not use Outlook express... this could NOT have come from me. __________________ Use Lensman's program and get the most for your hard earned traffic. Get Heidi for your site Here. Lots of sets to choose from. She makes a great Addition to any site. Grab one Grab All.

08-20-2003, 05:25 PM	#6
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Cmon guys, how long have you been webmasters? Klez has been around for something like 1 1/2 years, and that forges source email addresses. This virus does the same, so if you get back a bounce complaining of a virus or bad attachment there's a good chance that the original email didn't come from your machine...

08-20-2003, 06:13 PM	#8
Dirty F Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Posts: 59,204	http://www.gofuckyourself.com/showth...hreadid=165851 Its so annoying, i for once make a decent post and nobody fucking reads it, yet everybody keeps posting the same question over and over again.