HQ

i got 31 emails today with viruses attached all from the same fucking asshole. (edit: well i guess he/she's not an asshole if it's a virus that's causing the spreading...)


---------------------

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks
---------------------


how can i stop this fucking shit? no return to address.

[This message has been edited by HQ (edited 07-23-2001).]

HQ

[This message has been edited by HQ (edited 07-23-2001).]

HQ

[This message has been edited by HQ (edited 07-23-2001).]

Crutch

I'm still getting them as well....im coding a email blocker as we speak. I thought it would end in a few days but i guess not. They just keep coming..driving me nuts!

Though i feel boneprone..i read he was getting like 400 of those a damn day.

jimmyf

HQ, go look up his DNS and there are a couple of things I have, and you can fuck with him.
Like when you go to bed tonight you can ping him 1000 times or acouple of other stuff
You can check if he has any open ports and send him a Pop-Up Mesage
GOFUCKYOURSELF

Jim

HQ

400? holy fuck. i got 31 to 2 email addresses. this guy is a fucking newbie prick.

better a newbie than an effective hacker i guess.

HQ

jimmyf,

i really don't know much about looking up DNS and the likes. all i have is his email address and the info in the email header you see in my first post.

i never bothered to see if all 31 emails were the same or not, just assumed they were.

jimmyf

HQ, powersurfr.com redirects to http://www.shaw.ca/start.html

Most likly it's not his email address.



[This message has been edited by jimmyf (edited 07-21-2001).]

george

I've been getting a lot of them from Korea, some from Thailand, Japan for at leat four or ficve days now, at least they claim to be from there, next one I'll take a closer look,

fortunately I have a policy against opening umsolicited attachments

they have hit the webmaster@ addresses of all my websites

somebody is putting a lot of effort into this one

------------------
http://asianamazons.com/content

CDSmith

Hey HQ --

I've counted about 55 mails from this jerkazoid in the past 4 days now, all from different email addresses.

The thing is, I KNOW a few of the owners of the email addresses!! I know they wouldn't spam, so the question is:

Is this a self-perpetuating virus that is yet undetectable by Norton and others? or....

...Is this all from one guy that is running some sort of program that takes control of random email servers in the world and spams from them?

I don't know much about such devious programming tactics either, but I'm learning how to defend myself, believe me. If any of you start getting these emails, sometimes in different languages too, DO NOT OPEN the attachment.

My last question, to no one in particular is --- WHY WHY WHY are some of you opening up attachments from people you don't KNOW??? Are you brain-dead or just ignorant of common sense? (because of the serious nature of this and the potential for a lot of computers to get boned up, I thought it best to POUND the fucking point home, DON'T OPEN WHAT YOU DON'T KNOW)

Hell, the first time I got this spam, I didn't know it was such, and it was from a webmaster friend of mine. I STILL replied to the email and ASKED HIM WHAT IT WAS BEFORE I WOULD CONSIDER OPENING IT!!!!!!!!!!

Am I getting through to some of you? Live and learn, right?
<font face="Arial">___________
CD
* <a href="http://www.pornosexpages.com/fetish/fatalfant/submit.html" TARGET="_blank"><font face="Mistral" size=+1 color="#FFCCCC">Fatal Fantasies</font></a> <--- Submit your nasty fetish shit here</font>
* <a href="http://www.topbucks.com/affiliate/clickthru.cgi?id=1448" TARGET="_blank"><font color="#FFC5C5"> $40/signup, $50/recur, 65% partnerships</font></a> +10% webmaster referral, free content!
* <a href="http://www.oliver-klozov.com/cgi-bin/refer.cgi?ref=cdsmithok" TARGET="_blank"><font color="#FF8080">Oliver Klozov: 60% signups, 40% rebills</font></a> +High Quality free content, mthly $$ bonuses

Pete

I'm getting these e-mails one after another. At least 20-30 a day to 4 diferent e-mail addresses. I just got rid of a virus called "haptime.exe" I hope I dont get this one because I'll be fucked.

Let me know what I can do to help catch this fucker!

Pete

I tried looking up the DNS but these e-mails are coming from several different people. More than likely the virus is attatching itself to random addresses and perhaps sending to anyone in your address book.

Look out...I have hundreds in mine!

Pete

I e-mailed this cocksucker back several times hoping to get a response and this is what I got just now.

"Really sorry, the virus will send emails automatically!!
its called w32.sircam.worm@mm"

From Alfredo Campos
[email protected]

Crutch

This is what i understand about the virus.

It attachs to your address book in outlook so anytime you send an email, everyone in your address book gets a virus. The people that are sending this virus out, probably have no idea that there infected. If you have there email address, tell them and give them the url to that explain how to fix and remove it.

I got a virus from a friend of mine in the biz, and once i let him know he was infected, he got rid of virus. Haven't receieved it from him since. Obviously, theres alot of people infected. Instead of bitching at them, and blaming them, tell there infective and to get rid of it....cause they have no idea there infected.

CDSmith, to answer your question on why people open shit they know nothing about, these are the same people are running outlook for there email client. More security holes then swiss cheese. So go figure.

aprilkorova

Hey HQ

Well, I wish I had good advice as to how to rid yourself of this problem...all I can say is I feel your frustration and I'm sorry you have to deal with it. Hope everything works out in the end.

April

kush

this is the reason why I list my yahoo address on all of my freesites

I'm getting lots of shit in that mail too...

------------------
<A HREF="http://www.dailysteam.com/webmasters.html" TARGET=_blank>
My Webmaster's Page</A>
General Webmaster Info, seen from my point of view ;)<A HREF="http://www.dailysteam.com/sponsors.html" TARGET=_blank>
Sponsors List Page</A>
Organized, honest listing of sponsors and my comments on them

Raven

So far, I've received three hundred infected emails, one of which was from a colleague of mine.
It is my understanding that, if you don't open the attachment, it won't harm you. Delete it immediately.
I also read that all email programs are vulnerable, not just Outlook.
There are fixes for this virus located on Symantec's site and McAfee's site.

I have my email program set to delete any and all mail that comes with attachments. Sorry I won't be able to look at my sister in law's pictures of her child, but, this virus does nasty things.

They are coming in from all over the country and the world.

------------------
Sin-Text-Because text sells sex.

Puffin

Hi folks,

I have posted this information regarding infected emails on some of the other boards, and will be reposting it here as well in the hopes of reaching as many people as possible. The virus that is going around this weekend can be sent from anyone's computer, not just a select few, so it's important to really be on the lookout. I'd like to share my own experiences with this in the hope of saving some of you a lot of headaches.

Yesterday morning, my computer became infected with the SIRCAM virus. I opened an attachment that came from someone I have done business with in the past and someone that I trusted. Upon opening the attachment, the virus that was contained in it was released onto my own computer.

I have done a lot of reading in the past 30 hours or so regarding this virus, and here is what I've learned so far. The virus harvests email addresses from the recipients hard drive and any network connections. It will then randomly grab a file from the My Documents folder of the infected computer's hard drive, attach the virus, and through a proprietary embedded email program, send it to the email addresses it has gathered.

The emails you receive may be sent from someone you know, which makes this thing even more virulent, since you are far more likely to open an attachment from a friend, family member or coworker than from a complete stranger. It also points out how vulnerable your data can be, since any of the files on your hard drive are likely to be "chosen" as the container for this virus.

I can't apologize enough for being a factor in the transmission of this virus, and even though it was entirely inadvertant, I feel really horrible about the inconvenience people have been caused by anything sent from my computer. I had no idea at the time what was happening, and I have no idea now of how many of these messages were sent out, or who they were sent to.

If any of you received an unsolicited email from me, or anyone else for that matter, in the past few days, I hope you haven't opened it. If you did, the following steps should help you eliminate it from your computer and contain the damage. Please destroy the attachment immediately, and do not open attachments from ANYONE, even very good friends, until you have checked with the sender first.

You can download a fix for it right here: http://www.symantec.com/avcenter/tools.list.html

If you want to read further about this virus, you'll find more information here: http://www.symantec.com/avcenter/[email protected]


Again, I apologize for having become a carrier for this thing, and I hope you haven't suffered any lasting damage as a result.

Puffin

Warphead

Not only have I got about 50 in the last couple days, but I'm getting them in spanish, italian and an alternate charset.

Fucked up world

HQ

jimmyf, i see that powersurfr.com redirects to shaw.ca... most likely not his email address for sure. if he (or the virus) can place a blank email address in emails, i'm also sure he can place in fake ones too.

remember back in the day when email viruses were a myth? what a bitch outlook has been. i admit that i use outlook, but everything i receive is virus checked first (via norton), so i'm fairly safe.

george, very good policy to have! do not open attachements ever (unless you know what they are and who they're from.) the majority of viruses i've received have been from unprotected and unsuspecting friends. the best thing to do is to educate everyone on your list, as Crutch said.

CDSmith, what's up? i have no idea whether it's a self-perpetuating virus or not... as there's no reply-to address on the majority of my emails. i posted one of my emails in my first post hoping that someone else can make some use of it.

very good advice from george and CDSmith! do not open unexptected attachments (and especially executable attachments) from even your own friends. that's how viruses thrive. now that email programs are virus-prone and email spamming is so popular, attachments are not a good thing at all.

Pete, i'm with ya... if there's anything i can do to help catch this fucker, let me know too.

thx aprilkorova


... and, oh yeah.... all of my emails with viruses have not been from friends. they've all been complete strangers... how strange... i can't even see why i'd be on their email lists.

[This message has been edited by HQ (edited 07-22-2001).]

jimmyf

Well I've yet to recieve one of these emails.
I wonder if it has anything to do with I use Netscape 4.xx.
The only thing I use IE for is to check any new web page I do.

Never Never Never would I even think about using Outlook for email NEVER.

Also some time ago I changed all of my email addres's on all page's I could find or think of to Yahoo.

Ever once in awhile I'll get HaHaHa and it's
coming from a page I've yet to find.

Jim

PersianKitty

I stopped counting after wading through 350 in 6 hours. The dang thing is multiplying and I'm getting hit by anyone who has my website in their browser cache...

OoOoo I'm dyiiiinnnggg.. (in a BugsBunny sort of way)

zip

Fuckerdefuckfuck - this fucking shit is really driving me totally fucking nuts! I receive one fucking virusmail every fucked up 10 minutes or so. I use Eudora and those fucking attachements (some are fucking over 600kb) are fucking up my hd.

- What the fuck can we do to stop this motherfucking shit?

Oh yeah, this is my very first fucking post

Take care fuckers.

Jer

I got about 100+ the last days. My mailbox will crash. When you have a site with like 50k visitors, it sucks even more. I imagine how TheHun.net mailbox is right now. He must check his emails every minute or his mailbox will be fucked.

I didn't know that so many "business people" visit my sites, hehehe.

The only solution is a script/program to STOP this on the mailserver, not in email programs like outlook or eudora.

I imagine how this will be in just 5 days. Oh man.

HQ

i only got 2 today. looking better. one of them was the first 'HaHaHa' one i've got though.

what's up PersianKitty and zip??? so you're saying it's a browser cache thing? i don't have my email on my main page or image pages at all... only on my webmaster page. maybe this is why i'm not being hit too bad.

TheFLY

I got 100 of them yesterday... this is really fucked up -- and my little email program Opera doesn't have very good email filtering so I'm screwed... I have a feeling this is only going to get worse -- because it seems the volume of emails that I've been getting has been increasing exponentially... Last week I only had like 3-5 of these/day -- then it was 10/day -- 50/day -- now 100! Shit... I'm going to leave my PC on and set it to download new email every 10 minutes and have it just download these trojans all day long ;) If I get more than 100/day tomorrow I'll probably have to switch to another email program *cry*

XXXInsights

Getting over 700 a day now, this is really fucked up. I downloaded E.Spy from tucows and can delete them on my mailserver now. I'm using a isdn connection, otherwise i'm downloaden emails 24/7 (some attachments are over 2mb)

pimplink

I get that shit, too. Maybe another Outlook-specific email virus.

Fucking A.

HQ

700 per day??? unbelievable. this is a real problem.

what is causing it? or how does it work? does any one know?

Platinum Dave

does anyone know how this virus will be stoped?

Is this virus only in the adult biz, someone pissed off at us or what?

Or is this a full out virus across the entire net?

I get anywhere from 5-20 a day, my partner gets 5-20 while I talk to him on the phone for 15 minutes.

what the fuck

------------------
Platinum Bucks
Cash4Blind

DragonAss

I believe this is the virus going around, so I'm posting this again:
http://www.antivirus.com/vinfo/virus...=TROJ_SIRCAM.A

Check your systems to make sure this virus isn't installed!!

I'm still getting plenty of emails with this thing attatched. It's not running from my machine or doing any damage, but the only way to slow down and stop these emails is for everyone else to be clean. Spread the word!!

If you do have this virus, here's an easy fix: http://www.symantec.com/avcenter/FixSirc.com

Also, for checking your email before you download it: http://www.idgnet.com/english/crd_pc_70763.html

It may not be practical to immediately delete everything with an attatchment (because you might delete something you want to see), but if you can download one attatchment email and then recognize the others, you can save yourself some serious download time until this thing is gone.

Hope this helps

danevans

I got a few of them too, and because I just reinstalled win on this machine I don't have an antivirus installed yet. So I forwarded one of those mails to my hotmail accounts, which does an automatic attachment virus scan by McAfee, and guess what - no virus found message appears.
Now, either hotmail and it's antivirus are outdated, or I got a virus that doesn't feel like doing something bad
But since the txt is the same as in yours/emails I got, I believe that it's hotmail's fault..

Slick

This virus is spreading at a VERY HEAVY rate. In the last few days, I've gotten over 150 of these emails and there's others that I know of that have gotten more than that. Norton even upgraded it's status on it because of it's spread and I'm sure that it'll even start hitting the news if it hasn't already.

What the virus does is sends out RANDOM messages to people in it's mail, so it could be titled almost anything. Some of the titles that I've gotten have been "bulldogs", "Cardholder", "Carefree Days", "Christmas",
"COLA", "Competative Strategy", "Monday Tuesday", "Monique" and the list goes on and on and on.

The virus is VERY EASY to point out. What you'll get is a file attachment and all that the email will be is just 2 attachments, a Plain Text Document that's titled "Part 1.1" and the name of the other attachment has the title of the email in it and it's an
"application/x-unknown-content-type-lnkfile" file.

DELETE THESE MESSAGES AS SOON AS YA GET THEM !!!

You might ask me how I got infected. Well, one of the first emails that I got like that was entitled a girls name, I think that it was "Monique". Reading the text part of it, it said something like "Check me out" or something like that, so stupid me, I thought that it was a pic submittion to me, so I clicked on the file and got infected.

Anyways, have a great day !!! If you happen to get infected, like I say, with me anyways, it cut off access to everything but Explorer for some reason, so go to Norton and get their cure for it here - http://www.symantec.com/avcenter/ven...oval.tool.html

Ok then, I just wanted to let all of you know about it to keep ya safe. Like I say, some of you probably already got quite a few of these
emails, but those who haven't, should very soon with it's spread.

Best Regards,
Slick

Hot Tropical Babes

Does anyone know if you can delete the virus in quarenteen? No files are coming up infected, they are just in quaranteen. I am going crazy, I am recieving at least 100 an hour today. I did get one trojan horse today, it was a js.fav . all it does it put a couple of porn sites and one search engine in my favorite places and then it kills itself. I am weary from this already!

------------------
Hot Tropical Babes

Naughty

Hey Slick,

First you infect all of us with your virus (getting horny on this 'monique character') and then you tell us to have a great day??

Did anybody tell you to GFY already?



Thanxx for the info...

------------------
Paulus...
Megageil.tv
NaughtyCelebs.co.uk

[This message has been edited by Naughty (edited 07-23-2001).]

Indy the real one

Pk,
Here s an example why I think TGP should accept hotmail or yahoo based email address.
When we are posting to tgp s we get a shitload of spam and some like this one are infected...

enoj

I am sick of receiving that e-mail!

PersianKitty

Indy,

I can understand some submitters' wanting to use anon email addresses, but I can actually say I've never used email addresses submitted to me to spam in any way. I've never kept a list or sold one (been asked to many times).

I know everyone has at least one *real* email address. I'm sure many people have several. I'm faced with trying to keep the TGP submitters halfway honest in the 1 gallery submitted per day rule. If everyone could submit using anon emails addys, then submitters would just go get 40 or 50 or more and submitted at will.

HQ

these emails are taking forever to down from my server. and my outgoing email server is down (probably due to the virus) so i can't send emails. fffuuuccckkk!!!

HQ

i'm checking my system again, just to make sure i don't have this virus... cuz i just got 2 emails from mailer deamon firewall's and it's making me think that i might be sending the shit out... fuck i'll be pissed if that's true.

vegasdude

fucking crap(s)!!!!!!!!!!

All the emails i own recieved this viri messages....

All the emails from japan...

I've blocked over 300.... and still counting... I have a domain which is ranked high on goggle and most emails was sent to that domains email!

if this shit continues THEN i declare these fucking newbees war.... hope I got a few allies here

Rgds
Vegasdude

lightswitch

Its a worm virus w32.sircam.worm@mm

it takes your Outlook email address book emails everyone in it, the email seems to always start with "HI, How are you?" & then one of four other lines of text, most common. says some thing like, "I send you this file in order to have your advice"
(funny note the bad Grammar,as if it was badly translated from another language.) Virus is belived to originate in east Asia. Infected computers using Interenet Explorer, frequenty read." www.worm.com your computer has been taken over by the chinese."
the attached file is from the victoms HD, sometimes theres some really good ones. Ive gotten a few resumes yesterday, & a really really bad Movie script a freind of mine tried to write.

Wouldn't it funny if one of these people got a job offer because of there resume was sent out to a million people?

HQ

vegasdude,

that's it. i only get it to two of my domains, and it just happens to be the only two rated high on SEs. they are not the highest hits/day or highest sites linking to it or anything like that!

and one of them gets hardly any traffic at all but is rated very high on google!

shunga

Try using http://www.popchecker.com and deleting them on the server.

HQ

i checked my system and i had 11 instances... once i cleaned out my quarantine i had 0 instances... so i'm clean

whoreans

these text virus crap is outta control!

HQ

shunga,

thx for that url. but i just realized the best thing for me to do is just telent to the server and use elm to delete them right off the server.