Author Topic: Virus Warning (Read 498 times)

hblair · « **on:** April 22, 2002, 07:32:24 AM »

I've been getting all kinds of weird emails this morning from squaddies and other Aces High pilots with strange file names attached. I don't know who's infected or what, but DON'T open anything with an attachment, this looks worse than the "seven dwarfs" crap that got me last year.

gofaster · « **Reply #1 on:** April 22, 2002, 08:17:52 AM »

Funny you should say this. One of my squad-mates got caught in the same way - we all got an email from him about how he had been working hard on such-and-such and it was improved and we should check out some file and a .com URL that was included. Later came to find out he hadn't sent it (intentionally) and that it was a virus-laden email that had gone out to everyone in his address book.

I can't recall the name of the virus offhand, but I think it started with an "M"...

Eagler · « **Reply #2 on:** April 22, 2002, 08:33:19 AM »

been gettin some lately that try to open themselves, jump straight to open/save box without me having to click on the attachment... OE 6 here.

Maxopti1 · « **Reply #3 on:** April 22, 2002, 09:39:36 AM »

This is currently the more common virus in the net, I attach you the communication that has come today, I hope could help.

For prevent the infection is sufficient an adjourned antivirus that executes the E-mail scanning.

Cheers.

Maxo

***************************************

Please be informed that earlier today our computer systems were infected by the following virus:

w32.klez.gen@mm

If you have received an email message from us today it is possible that your system has been infected as well. The virus is a worm and sends itself to all addresses in the windows address book. If you suspect that your system may be infected, do update your antivirus definitions. In addition, more information and a utility called "Fixklez.exe" are available from:

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html

This utility specifically targets the w32.klez.gen@mm virus and other similar viruses and removes it from the system.

We apologize for any inconvenience this may have caused you.

Best regards,

Pepe · « **Reply #4 on:** April 22, 2002, 10:24:11 AM »

Thanks for the advise

Pepe

Don · « **Reply #5 on:** April 22, 2002, 06:22:53 PM »

Note:

It is a newer version of the Klez virus:

>>A new variant of the Klez virus is now spreading over the Internet.
Like earlier versions of Klez, this virus affects all Windows machines,
takes advantage of a known security flaw in Outlook Express, spreads
via email and through network shares, and replaces frequently-used
program files with copies of itself. This new variant can also disguise

copies of itself as .RAR archive files, and occasionally will send out
an email message claiming that it is tool to remove the Klez.E virus.
If you receive an email message with an attachment that claims to be a
Klez removal tool, DO NOT activate the attachment.<<

It is annoying as hell. I opened my e-mail this morning and received about 6 infected messages. I did not open any of them, especially the ones which offer a free software program to kill it.

BEWARE!

Wlfgng · « **Reply #6 on:** April 22, 2002, 06:37:22 PM »

While it is true that variants of the Klez virus come in the guise of a 'fix' for the very same virus. The removal tool avaliable on the link above is from Symantec and is valid.
It will remove the virus as described.

Be careful, as some variants of the virus send emails with the attachment that claims to remove the klez virus... it isn't the same thing as downloading from above.

Do NOT open the attachment if it comes in the form of an email.

Lizard3 · « **Reply #7 on:** April 22, 2002, 11:03:11 PM »

moose · « **Reply #8 on:** April 22, 2002, 11:21:17 PM »

yah ive been getting these too

someone has it. hopefully not me

funkedup · « **Reply #9 on:** April 22, 2002, 11:34:04 PM »

http://www.mcafee.com/

sling322 · « **Reply #10 on:** April 23, 2002, 12:43:45 AM »

Well after you attend a thing called "ASSCON" what did you expect Hblair?

Ya never know what kind of virus you caould catch there.

eddiek · « **Reply #11 on:** April 23, 2002, 12:54:04 AM »

I've been getting all kinds of weird emails since hb posted this.
I ain't opened any of them, and ain't gonna.
The title of some of them smell of the FDB's:
101 Ways to Pork Your Squaddies

Bunghole Wars: The History of Chute Shooters

Things That Gross Out Jerry Springer

Others are just to sick to list here.

Ductape · « **Reply #12 on:** April 30, 2002, 09:15:27 AM »

Unfortunately, I have recieved two of this variant also. I am using Norton's 2002 however, with the most current update downloaded. I have had no problems as I scan EVERY EMAIL coming into my system, and also SCANN EVERY EMAIL LEAVING my system also to prevent this from happening.
I used Netscape Mail for years just to combat this problem, and am forced now to use one of the MicroSoft mail programs as my cable provider will not support Netscape. Having weathered a couple of these attacks has relieved the worry I had associated with this phenomenon of Email Worms taking over the address book and mailing itself.
I am not sure my virus mailings came from anyone in AH, but I save the source information associated with these files, and some I have recieved in the past have origionated from iplanet. The best my limited network detective skills can come up with is that iplanet is a server I am routed through to get to AH. I was wondering for awhile, (and still am) if anyone was able to get my email address through association with the game. I guess it is possible since I have never made any secret of my email address.
Anyway, to wrap this up, I too have recieved virus emails from people I do not know, saying that the attachment will fix the very virus it actually is. My variant has also been W32.Klez.gen@mm.
I have it under control, and my system is clean after scanning this AM and finding nothing.
I hope all of you have faired as well as I. My lesson from all this; SCANN EVERY EMAIL COMING IN AND GOING OUT!

Ripsnort · « **Reply #13 on:** April 30, 2002, 09:27:06 AM »

Interesting...no virus protection on any of my computers since 1987...we just use common sense. If it ain't from someone we know, its deleted. No problems whatsoever in 15 years.

AKIron · « **Reply #14 on:** April 30, 2002, 09:42:44 AM »

Quote

Originally posted by Ripsnort
Interesting...no virus protection on any of my computers since 1987...we just use common sense. If it ain't from someone we know, its deleted. No problems whatsoever in 15 years.

I have a lot of customers with the same attitude. Most of them haven't been so lucky as you.

An ounce of prevention is worth a pound of cure - Ben Franklin