[OT] Virus Alert - A Real One

The other day I received an email purporting to have been sent by
warren.simmons@worldnet.att.net ; it has the Subject: line of 're:
something for you', a single word of text ('never!') and an attachment
named 'undefined.zip'.

The .zip file contained a single .scr file, undefined.htm.scr, which
contained - you guessed it - a virus; McAfee says it is W32/Netsky.c@MM.

A word to the wise and all that.

DD

On 9 Mar 2004 21:34:28 -0500 docdwarf@panix.com wrote:

:>The other day I received an email purporting to have been sent by
:>warren.simmons@worldnet.att.net ; it has the Subject: line of 're:
:>something for you', a single word of text ('never!') and an attachment
:>named 'undefined.zip'.

:>The .zip file contained a single .scr file, undefined.htm.scr, which
:>contained - you guessed it - a virus; McAfee says it is W32/Netsky.c@MM.

:>A word to the wise and all that.

You have only received one????

--
Binyamin Dissen <bdissen@dissensoftware.com>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel

In article <u84u40d0c1o828r2mb109oa2gj42dv3oa4@4ax.com>,
Binyamin Dissen  <postingid@dissensoftware.com> wrote:
>On 9 Mar 2004 21:34:28 -0500 docdwarf@panix.com wrote:
>
>:>The other day I received an email purporting to have been sent by
>:>warren.simmons@worldnet.att.net ; it has the Subject: line of 're:
>:>something for you', a single word of text ('never!') and an attachment
>:>named 'undefined.zip'.

[snip]

>You have only received one????

Only one from Mr Simmons' old email address, aye.

DD

 

Am 10.03.04, 02:34:28, schrieb docdwarf@panix.com zum Thema [OT] Virus=2
0=

Alert - A Real One:


> The .zip file contained a single .scr file, undefined.htm.scr, which
> contained - you guessed it - a virus; McAfee says it is=20
W32/Netsky.c@MM.

Why do you use window$
Sorry only german: http://service.t-online.de/c/15/27/07/1527076.html


> A word to the wise and all that.

Andreas

 

Am 10.03.04, 16:42:43, schrieb Andreas Lerch <andreas@andreas-lerch.de> =

zum Thema Re: [OT] Virus Alert - A Real One:

Hi

> Why do you use window$
Sorry i am to fast :-))


Andreas

In article <20040310.16495060@rechner12.lerch.home>,
Andreas Lerch  <andreas@andreas-lerch.de> wrote:
>
> 
>
>Am 10.03.04, 16:42:43, schrieb Andreas Lerch <andreas@andreas-lerch.de> =
>
>zum Thema Re: [OT] Virus Alert - A Real One:
>
>Hi
> 
>Sorry i am to fast :-))

Oh, I *cannot* resist... don't worry, women tell me that *all* the time.

DD

In article <20040310.16424389@rechner12.lerch.home>,
Andreas Lerch  <andreas@andreas-lerch.de> wrote:
>
> 
>
>Am 10.03.04, 02:34:28, schrieb docdwarf@panix.com zum Thema [OT] Virus=
20=
>
>Alert - A Real One:
>
> 
>W32/Netsky.c@MM.
>
>Why do you use window$

I use a variety of operating systems... the account that received it is on
a dial-up Unix shell.

DD

docdwarf@panix.com wrote

> The other day I received an email purporting to have been sent by
> warren.simmons@worldnet.att.net ; it has the Subject: line of 're:
> something for you', a single word of text ('never!') and an attachment
> named 'undefined.zip'.
>
> The .zip file contained a single .scr file, undefined.htm.scr, which
> contained - you guessed it - a virus; McAfee says it is W32/Netsky.c@MM.

His Windows machine has probably become 'owned' by McDoom and is being
used as a relay by russian spammer gangs.

It has been claimed that up to 10% of all Windows machine on the
internet are potential or actual remailers of spam and viruses.

(no, seriously).

In article <217e491a.0403101027.61827d20@posting.google.com>,
Richard <riplin@Azonic.co.nz> wrote:
>docdwarf@panix.com wrote
> 
>
>His Windows machine has probably become 'owned' by McDoom and is being
>used as a relay by russian spammer gangs.

Could be... but if that were the case I'd expect it to show his present
addres, not a former one.

My thought is that the Google archives were address-harvested and folks
use addresses from the newsgroup to target other newsgroup users... makes
sense, in a twisted sort of way.

DD

<docdwarf@panix.com> wrote in message news:c2lurk$3b4$1@panix1.panix.com...
>
> The other day I received an email purporting to have been sent by
> warren.simmons@worldnet.att.net ; it has the Subject: line of 're:
> something for you', a single word of text ('never!') and an attachment
> named 'undefined.zip'.
>
> The .zip file contained a single .scr file, undefined.htm.scr, which
> contained - you guessed it - a virus; McAfee says it is W32/Netsky.c@MM.
>
> A word to the wise and all that.
>
> DD
>

How long have you been on this planet?? These virus's have been floating
around for a long, long time.

JAS