Lumenier RB2205C-12 2400KV SKITZO Ceramic Bearing Motor
Thread Tools
Old Jul 25, 2001, 05:23 PM
Mark Wood is offline
Find More Posts by Mark Wood
characters welcome!
Mark Wood's Avatar

Whacked by a virus! Please read!!


Gang, this is the text and link from an email that I sent out from a clean system today.

This is NOT a drill...
=============================================
Friends:

If you have gotten a strange email from my system with an attached file of >100k, don't open the file and engage it with a virus program. This is apparently a worm virus that infected my system (first one, dang it!). The webpage devoted to it's description and the tool for it is in the following link: http://www.sarc.com/avcenter/venc/da...m.worm@mm.html

Below is a clip from the webpage describing the virus:
=============================================
"This worm arrives as an email message with the following content:

Subject: The subject of the email will be random, and will be the same as the file name of the email attachment.
Attachment: The attachment is a file taken from the sender's computer and will have the extension .bat, .com, .lnk or .pif added to it.
Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for"
================================================== ======================

I am truly sorry that this has happened and I'm in the process of rectifying the problem.
I strongly suggest that you run a virus detection program to make certain of the integrity of your systems. I also strongly suggest that you go to the supplied link, learn about this virus and if necessary download the removal tool for this virus. It is located just past the middle of the page.

Again, I apologize for any inconvenience this may have caused. I guess it's time to upgrade my virus programs, huh?

Regards,

Mark
Old Jul 25, 2001, 05:44 PM
Luxor is offline
Find More Posts by Luxor
Rotorhead
Luxor's Avatar
Mark, got them, didn't open them, flushed them right away. I got these yesterday and didn't know who they were from. I wrote a reply to the sender and got no response, The e-mail it was sent from didn't exist. Thank god I didn't open them. Thx, Eric S.

ps. Mine read: Look at these(IE. dreamstick, platimum). I need your advise. From MAXIMUS@PRODIGY. Hope this help someone else. Damn cyberterrorists anyway.
Old Jul 25, 2001, 06:06 PM
Andy W is offline
Find More Posts by Andy W
Registered User
Andy W's Avatar
Guys, use AV, and set it up to update your defs. on a regular basis..
Also use a personal firewall, even if you're on dialup. zonelabs.com is about the most user friendly, although you can buy products from Symantec (the Norton folks). You can get a 'suite' of personal protection stuff from Symantec known as the Norton Internet Security. Does AV, firewall, privacy protection and content filtering. Go here for info: http://www.symantec.com/homecomputing/ and buy online or TODAY @ compusa, best buy, media play, etc.
..a
Old Jul 25, 2001, 07:25 PM
Sligh is offline
Find More Posts by Sligh
Registered User
Mark,
I got the message from you this AM, but I was skeptical since it didn't seem to have anything to do with electric planes, or making beer. I deleted it without opening, thank goodness.

Andy,
For us (at least me) computer dummies, does that mean if I had the software you mentioned installed that my computer would have been protected if I had opened the file from Mark?
Thanks,

Sligh
Old Jul 25, 2001, 09:26 PM
Scott C is offline
Find More Posts by Scott C
son of a pilot
Scott C's Avatar
I got one the other day about exam results.

Scott
Old Jul 25, 2001, 09:41 PM
Mark Wood is offline
Find More Posts by Mark Wood
characters welcome!
Mark Wood's Avatar
Luxor/Sligh:

WEIRD. To my knowledge I've never sent either one of you email.
I downloaded and ran the provided tool which expunged 20 files just a few minutes ago.
Headed to Office depot for Norton as we speak.
This sucks...

mw
Old Jul 25, 2001, 10:14 PM
Luxor is offline
Find More Posts by Luxor
Rotorhead
Luxor's Avatar
Mark, I believe mine came from someone on the Ikarus board. Quit a few of us there have been hit with this thing. Very strange. Eric S.
Old Jul 25, 2001, 10:16 PM
Scott C is offline
Find More Posts by Scott C
son of a pilot
Scott C's Avatar
Thanks,
I ran the fix program and it said that it removed the virus. My computer seems ok. What damage did it do to yours?

Scott
Old Jul 25, 2001, 11:33 PM
Mark Wood is offline
Find More Posts by Mark Wood
characters welcome!
Mark Wood's Avatar
All:

I'm not sure of the extent of the damage yet besides the deletion of 20 files that were corrupted when I ran the virus program that was bundled with the system when I bought it. Talk about learning a valuable lesson.

mw
Old Jul 26, 2001, 12:45 AM
GregG is offline
Find More Posts by GregG
Speed Demon
GregG's Avatar
I got this email yesterday. It came from "Education Department". I had never heard of this so I checked it out by looking at the source code of the email. It said one part was text, and the other part a ".pif" file. I purposely didn't open it because of the .pif. Thanks for the warning Mark, Thanks for the advice on the firewall software Andy.
Old Jul 26, 2001, 08:50 AM
newguy is offline
Find More Posts by newguy
No retreat no surrender
newguy's Avatar
Hi guys, I got sent this one too. I didn't open it, but deleted it from the Eudora e-mail program I am using. Does that mean I will be OK? Jim

Old Jul 26, 2001, 09:29 AM
GYROGEARLOOSE is offline
Find More Posts by GYROGEARLOOSE
Sometimes it works!
GYROGEARLOOSE's Avatar
Quote:
Originally posted by Mark Wood [groundloop]:
Luxor/Sligh:

WEIRD. To my knowledge I've never sent either one of you email.
I downloaded and ran the provided tool which expunged 20 files just a few minutes ago.
Headed to Office depot for Norton as we speak.
This sucks...

mw
I got hit with one this morning that started sending itself to everyone in my address book! I think I got it stopped! -gyro-
Old Jul 26, 2001, 10:52 AM
Jacques Flambeau is offline
Find More Posts by Jacques Flambeau
Restful User
Jacques Flambeau's Avatar
This virus has been spreading like wildfire.
Read about it at:
http://enterprisesecurity.symantec.c...09&PID=7322320

SOP is to never, ever open email attachments, and in your eMail program, turn off javascript and vbs.

--Bill

Old Jul 26, 2001, 02:28 PM
SassyCat is offline
Find More Posts by SassyCat
Cat With Wings
SassyCat's Avatar
I got it, but it didn't effect my computer or e-mail at all. I asked everyone on my e-mail address if it'd been sent to them and they said no, so I must have some kind of protection, or, I don't know. I ran the anti virus program on both computers and it didn't detect anything. ~shrugs~

Sass
Old Jul 26, 2001, 02:49 PM
Hank Villerot is offline
Find More Posts by Hank Villerot
Registered User
Hey Loop...I got it. And thanks for the file...glad you downloaded Andy's friend holding the airplane. Remember that one? I had discarded it!


Thread Tools

Similar Threads
Category Thread Thread Starter Forum Replies Last Post
Booted outta our field!! Please read slowflyer Electric Plane Talk 23 Dec 13, 2007 04:26 PM
Severe Virus Alert - Please Read Andy W Life, The Universe, and Politics 5 Feb 19, 2004 10:51 AM
If you were cheated by Shawn @ eflightpower....please read this rcdude Vendor Talk 32 Feb 27, 2002 10:49 PM
PLEASE READ johnpmartins Aircraft - Electric - Airplanes (FS/W) 8 Feb 21, 2002 05:32 PM
Zagi Pitch problems, Zagi guys please read!! slowflyer Foamies (Kits) 4 Jul 10, 2001 10:14 AM