Virus via email - GoFuckYourself.com

boneprone · 04-05-2001, 12:57 AM

I get about one virus a week sent to me.. It is usually the one from [email protected]

titled Enanito si, pero con que pedazo!

The same virus has been sent under title
Snow White and the Seven dwarves as well.

Anyone else get this one? Im figuring some of you may get it, since I get it every week, and it looks to be from an adult web address.. How can I report this guy, or the guy sending it every week. As far as I know it is illegal to send viruses intentionally knowing that you have a virus with intention to infect others..

Anyone else here get viruses sent to them regularly?

-

[This message has been edited by boneprone (edited 04-05-2001).]

HQ · 04-05-2001, 01:04 AM

me too dude. the one from [email protected]. good thing i got anti-virus running.

------------------
HQ

HQ's Daily Nude
http://www.hqdailynude.com/

Traffic Trade?
http://www.hqdailynude.com/webmasters.html

Free Content?
http://www.oliver-klozov.com/cgi-bin...i?ref=hqdailyn

boneprone · 04-05-2001, 01:08 AM

my wife loaded the snow white one two days ago, and my antivrius programs didnt catch it till I scanned my computer.. I relaize it would have been prevented if she had scanned it from the email, but she didnt.. It got in and infected shit..

My virus program quarentiened it and destroyed it, but Im scared some other files were infected and it can still spread.. So I reformated everything and re-loaded all programs with my recovery disk

------------------
Webmaster/Owner
www.boneprone.com
icq: 66883099

MindWaste · 04-05-2001, 01:18 AM

Good ol' Recover disk' .heh..

HQ · 04-05-2001, 01:31 AM

boneprone,
doesn't your virus prog auto-scan emails? mine does. what are you using? i want to make sure that i'm not letting any viruses slip thru.

------------------
HQ

HQ's Daily Nude
http://www.hqdailynude.com/

Traffic Trade?
http://www.hqdailynude.com/webmasters.html

Free Content?
http://www.oliver-klozov.com/cgi-bin...i?ref=hqdailyn

Juge · 04-05-2001, 02:12 AM

I've been getting this one for months.

Have you guys heard of the new security flaw in IE??? Go to my webpage www.jugesbikini.com, there's a link to it right on the main page. I thought I'd be nice and let everyone know, since microsoft refused to place this patch to fix it in their Windows Update... hmmm...

------------------
Juge - webmaster of:

[email protected] - Email me for link exchanges

(damn i wish this script would remove commas off the end of URLs so i dont have to edit my posts.... argh!)

[This message has been edited by Juge (edited 04-05-2001).]

Juge · 04-05-2001, 02:14 AM

here's the link, so you dont have to go to my page:
http://www.microsoft.com/technet/sec...n/MS01-020.asp

------------------
Juge - webmaster of:

[email protected] - Email me for link exchanges

dank · 04-05-2001, 10:31 AM

Is it considered a virus in my email if it won't send me through to my email box? It just has a blank screen that says I should try again later or just try logging out then logging back in again right now.

------------------

Slick · 04-05-2001, 10:37 AM

Damn, I've gotten this virus emailed to me MANY times in the last few months, it's very annoying. It's cut down lately, but it still comes in every now and then. Good Old Norton keeps me protected, he he he.

boneprone · 04-05-2001, 12:50 PM

no dank, thats just yahoo being too busy to respond to sending your email.. Simply hit the back button and try again.

A virus is something that is emaild too you..
Usually from someone you dont know, telling you to open something, or download something. Once you do it opens a virus to your files in your computer and fucks it up.

boneprone · 04-05-2001, 05:47 PM

got some info on this viruys for all you that have encountered it.

Name: W32/Hybris-C
Type: Win32 worm
Detection: Detected by Sophos Anti-Virus February 2001 (3.42) or later. A virus identity (IDE) file is available for earlier versions from the Latest virus identities section.
Sophos has received several reports of this worm from the wild.

Sophos researchers have released an updated IDE file which detects a minor mutation of the virus.

Comments: W32/Hybris-C is a worm capable of updating its functionality over the internet.

It consists of a base part and a collection of upgradeable components. The components are stored within the worm body encrypted with 128-bit strong cryptography.

When run, the worm infects WSOCK32.DLL. Whenever an email is sent, the worm attempts to send a copy of itself as an attachment to a separate message to the same recipient.

Any other behaviour exhibited by the worm is entirely dependent on the set of installed components. The effects of components known to Sophos at the time of writing are described below.

The text of the email message is determined by one of the installed components, and hence can be changed by the upgrading mechanism detailed below.

Consequently the message can have any subject, any message text and any filename for the attached file.

A common component of the worm checks the language settings of the computer it has infected, and selects a message accordingly from:

English

Subject:
Snowhite and the Seven Dwarfs - The REAL story!

Message text:
polite with Snowhite. When they go out work at mornign, they promissed a *huge* surprise. Snowhite was anxious. Suddlently, the door open, and the Seven Dwarfs enter...

French

Subject:
aidé 'blanche neige' toutes ces années après qu'elle se soit enfuit de chez

Message text:
sa belle mère, lui avaient promis une *grosse* surprise. A 5 heures comme toujours, ils sont rentrés du travail. Mais cette fois ils avaient un air coquin...

Portuguese

Subject:
muito feliz e ansiosa, porque os 7 anões prometeram uma *grande* surpresa.

Message text:
As cinco horas, os anõezinhos voltaram do trabalho. Mas algo nao estava bem... Os sete anõezinhos tinham um estranho brilho no olhar...

Spanish

Subject:
siempre muy bien cuidada por los enanitos. Ellos le prometieron una *grande*

Message text:
sorpresa para su fiesta de compleaños. Al entardecer, llegaron. Tenian un brillo incomun en los ojos...

The methods for upgrading the worm can also be changed as they are also upgradable components. At the time of writing, two have been seen.

One of the upgrading techniques attempts to download the encrypted components from a website which is presumably operated by the worm author. This website has since been disabled. However, this component could be upgraded to have a different web address.

The other method involves posting its current plug-ins to the usenet newsgroup alt.comp.virus, and upgrading them from other posts by other infections of the worm. These are again in the encrypted form, and have a header with a four character identifier and a four character version number, in order for the worm to know which plug-ins to install.

boneprone · 04-05-2001, 05:48 PM

Alao got some more data on it at this url..
guess it is sent by a robot.
http://vil.mcafee.com/dispVirus.asp?virus_k=98873&

NakedChik · 04-05-2001, 08:22 PM

I got that fucking snow white email every week until I blocked the sender.

boneprone · 04-05-2001, 09:27 PM

I just got the snow white one again here about 30 minutes ago..

Ive tried blocking the sender..
I use yahoo to filter out bulk mail or junk mail.. Im suprised they dont just put all mai from this [email protected] in there..

Hot Tropical Babes · 04-05-2001, 09:35 PM

I got that same one a few months ago,, however my virus protection got it before any damage. Then i started getting virus's from someone submitting via email... I blocked that email addy and havent had a problem since. It was a email from italy. They redirect their galleries too...

boneprone · 04-06-2001, 04:19 AM

it seems to be coming from multiple sources.. you block one sender, it come from another..

boneprone · 04-06-2001, 07:18 PM

imagine is someone hacked into a large volume site, and relpaced someones dialer with the virus exe.. OUCH!

These virus guys are smart enough, it wouldnt suprise me to see it happen.

hottshot · 04-06-2001, 09:09 PM

I'm getting it once a week ! Check out the site http://www.sexyfun.net ! theres a lot of info about the virus there!

------------------
Big-Penis webmaster program link exchange

04-05-2001, 12:57 AM	#1
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	Virus via email I get about one virus a week sent to me.. It is usually the one from [email protected] titled Enanito si, pero con que pedazo! The same virus has been sent under title Snow White and the Seven dwarves as well. Anyone else get this one? Im figuring some of you may get it, since I get it every week, and it looks to be from an adult web address.. How can I report this guy, or the guy sending it every week. As far as I know it is illegal to send viruses intentionally knowing that you have a virus with intention to infect others.. Anyone else here get viruses sent to them regularly? - [This message has been edited by boneprone (edited 04-05-2001).]

04-05-2001, 02:12 AM	#6
Juge Confirmed User Join Date: Feb 2001 Posts: 1,917	I've been getting this one for months. Have you guys heard of the new security flaw in IE??? Go to my webpage www.jugesbikini.com, there's a link to it right on the main page. I thought I'd be nice and let everyone know, since microsoft refused to place this patch to fix it in their Windows Update... hmmm... ------------------ Juge - webmaster of: Juge's Bikini and Thong Page - http://www.jugesbikini.com/ Juge's Weekly Wallpaper - http://www.weeklywallpaper.com/ Daily Bikini Babe - http://www.dailybikinibabe.com/ [email protected] - Email me for link exchanges (damn i wish this script would remove commas off the end of URLs so i dont have to edit my posts.... argh!) [This message has been edited by Juge (edited 04-05-2001).]

04-05-2001, 02:14 AM	#7
Juge Confirmed User Join Date: Feb 2001 Posts: 1,917	here's the link, so you dont have to go to my page: http://www.microsoft.com/technet/sec...n/MS01-020.asp ------------------ Juge - webmaster of: Juge's Bikini and Thong Page - http://www.jugesbikini.com/ Juge's Weekly Wallpaper - http://www.weeklywallpaper.com/ Daily Bikini Babe - http://www.dailybikinibabe.com/ [email protected] - Email me for link exchanges

04-05-2001, 01:04 AM	#2
HQ Confirmed User Join Date: Jan 2001 Posts: 3,539	me too dude. the one from [email protected]. good thing i got anti-virus running. ------------------ HQ HQ's Daily Nude http://www.hqdailynude.com/ Traffic Trade? http://www.hqdailynude.com/webmasters.html Free Content? http://www.oliver-klozov.com/cgi-bin...i?ref=hqdailyn

04-05-2001, 01:08 AM	#3
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	my wife loaded the snow white one two days ago, and my antivrius programs didnt catch it till I scanned my computer.. I relaize it would have been prevented if she had scanned it from the email, but she didnt.. It got in and infected shit.. My virus program quarentiened it and destroyed it, but Im scared some other files were infected and it can still spread.. So I reformated everything and re-loaded all programs with my recovery disk ------------------ Webmaster/Owner www.boneprone.com icq: 66883099

04-05-2001, 01:18 AM	#4
MindWaste Confirmed User Industry Role: Join Date: Mar 2001 Location: Tac Town Posts: 3,662	Good ol' Recover disk' .heh..

04-05-2001, 01:31 AM	#5
HQ Confirmed User Join Date: Jan 2001 Posts: 3,539	boneprone, doesn't your virus prog auto-scan emails? mine does. what are you using? i want to make sure that i'm not letting any viruses slip thru. ------------------ HQ HQ's Daily Nude http://www.hqdailynude.com/ Traffic Trade? http://www.hqdailynude.com/webmasters.html Free Content? http://www.oliver-klozov.com/cgi-bin...i?ref=hqdailyn

04-05-2001, 10:31 AM	#8
dank Confirmed User Industry Role: Join Date: Mar 2001 Posts: 1,674	Is it considered a virus in my email if it won't send me through to my email box? It just has a blank screen that says I should try again later or just try logging out then logging back in again right now. ------------------

04-05-2001, 10:37 AM	#9
Slick Confirmed User Industry Role: Join Date: Feb 2001 Location: Houghton, MI Posts: 7,338	Damn, I've gotten this virus emailed to me MANY times in the last few months, it's very annoying. It's cut down lately, but it still comes in every now and then. Good Old Norton keeps me protected, he he he.

04-05-2001, 12:50 PM	#10
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	no dank, thats just yahoo being too busy to respond to sending your email.. Simply hit the back button and try again. A virus is something that is emaild too you.. Usually from someone you dont know, telling you to open something, or download something. Once you do it opens a virus to your files in your computer and fucks it up.

04-05-2001, 05:47 PM	#11
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	got some info on this viruys for all you that have encountered it. Name: W32/Hybris-C Type: Win32 worm Detection: Detected by Sophos Anti-Virus February 2001 (3.42) or later. A virus identity (IDE) file is available for earlier versions from the Latest virus identities section. Sophos has received several reports of this worm from the wild. Sophos researchers have released an updated IDE file which detects a minor mutation of the virus. Comments: W32/Hybris-C is a worm capable of updating its functionality over the internet. It consists of a base part and a collection of upgradeable components. The components are stored within the worm body encrypted with 128-bit strong cryptography. When run, the worm infects WSOCK32.DLL. Whenever an email is sent, the worm attempts to send a copy of itself as an attachment to a separate message to the same recipient. Any other behaviour exhibited by the worm is entirely dependent on the set of installed components. The effects of components known to Sophos at the time of writing are described below. The text of the email message is determined by one of the installed components, and hence can be changed by the upgrading mechanism detailed below. Consequently the message can have any subject, any message text and any filename for the attached file. A common component of the worm checks the language settings of the computer it has infected, and selects a message accordingly from: English Subject: Snowhite and the Seven Dwarfs - The REAL story! Message text: polite with Snowhite. When they go out work at mornign, they promissed a huge surprise. Snowhite was anxious. Suddlently, the door open, and the Seven Dwarfs enter... French Subject: aidé 'blanche neige' toutes ces années après qu'elle se soit enfuit de chez Message text: sa belle mère, lui avaient promis une grosse surprise. A 5 heures comme toujours, ils sont rentrés du travail. Mais cette fois ils avaient un air coquin... Portuguese Subject: muito feliz e ansiosa, porque os 7 anões prometeram uma grande surpresa. Message text: As cinco horas, os anõezinhos voltaram do trabalho. Mas algo nao estava bem... Os sete anõezinhos tinham um estranho brilho no olhar... Spanish Subject: siempre muy bien cuidada por los enanitos. Ellos le prometieron una grande Message text: sorpresa para su fiesta de compleaños. Al entardecer, llegaron. Tenian un brillo incomun en los ojos... The methods for upgrading the worm can also be changed as they are also upgradable components. At the time of writing, two have been seen. One of the upgrading techniques attempts to download the encrypted components from a website which is presumably operated by the worm author. This website has since been disabled. However, this component could be upgraded to have a different web address. The other method involves posting its current plug-ins to the usenet newsgroup alt.comp.virus, and upgrading them from other posts by other infections of the worm. These are again in the encrypted form, and have a header with a four character identifier and a four character version number, in order for the worm to know which plug-ins to install.

04-05-2001, 05:48 PM	#12
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	Alao got some more data on it at this url.. guess it is sent by a robot. http://vil.mcafee.com/dispVirus.asp?virus_k=98873&

04-05-2001, 08:22 PM	#13
NakedChik Confirmed User Join Date: Feb 2001 Location: Omaha, NE Posts: 112	I got that fucking snow white email every week until I blocked the sender.

04-05-2001, 09:27 PM	#14
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	I just got the snow white one again here about 30 minutes ago.. Ive tried blocking the sender.. I use yahoo to filter out bulk mail or junk mail.. Im suprised they dont just put all mai from this [email protected] in there..

04-05-2001, 09:35 PM	#15
Hot Tropical Babes Confirmed User Join Date: Feb 2001 Location: Orlando FL Posts: 3,014	I got that same one a few months ago,, however my virus protection got it before any damage. Then i started getting virus's from someone submitting via email... I blocked that email addy and havent had a problem since. It was a email from italy. They redirect their galleries too...

04-06-2001, 04:19 AM	#16
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	it seems to be coming from multiple sources.. you block one sender, it come from another..

04-06-2001, 07:18 PM	#17
boneprone Hall Of Fame Industry Role: Join Date: Jan 2001 Location: Portland Oregon USA Posts: 34,415	imagine is someone hacked into a large volume site, and relpaced someones dialer with the virus exe.. OUCH! These virus guys are smart enough, it wouldnt suprise me to see it happen.

04-06-2001, 09:09 PM	#18
hottshot Confirmed User Join Date: Feb 2001 Location: AZ Posts: 900	I'm getting it once a week ! Check out the site http://www.sexyfun.net ! theres a lot of info about the virus there! ------------------ Big-Penis webmaster program link exchange