[Merged] The worst worm virus I've ever seen

[Jan]

Lil_Red and Headshop

Do you have a recent Spamcop complaint that you can post here or email to me?

Okay there may be a few hicccups with their service, but there is certainly (guess) 90% of spam that get dealt with and that is what we need. Spammers are the scum of the earth!

But what it appears is that original poster is receiving virus generated email and an email to the respective ISPs to alert the users that they have a virus on their system and how to get rid of it, is of paramount importance to prevent the virus spreading too far.

[Just_Plain_Onion]

Jan, I don't believe I got one of those. Of couse, I delete obviose spam on sight, and with an email like that, I probably didn't give it a second glance (Or a first ).

[AhmedF]

I have been getting about about 20-30 emails a day, from four email addresses.

They range from 100 kb to even 4.8 mb [argh]

Considering I am on a dialup right now that downloads at a max of 1 kb, I am utterly stuck...

So ... can someone give me the syntax to delete an email from a telnet session? I can view .. i just dont know how to delete.

[wly]

I am also getting lots of emails from @home users. Any sign?

[zMan]

Luckily, I haven't received any e-mails as of yet with this virus. And I have been on the net for last 5 years, and have NEVER been infected with a virus.

[gallery]

I'm also getting tons of these emails.

that's crazy !!

[Steve_S]

OK. We have a serious issue here.

I'm on the road but I have used:

http://www.zdnet.com/downloads/stori...,79544,00.html

If the earl doesnt wrap then copy and paste. Basically what this shareware app does is let you examine each email and nuke what you want so it never touches your workstation.

I'm going to test this in a few minutes but if my memory serves me correctly it runs as a standalone app, not part of your email client, feed it your pop data and go.

HTH

[JJJay]

Hi Guys, Don't know if somebody already posted the email address below, sorry but I didn't read the whole thread, but heres a link to Symantec's homepage outlining the virus/worm. I am currently receving anywhere from 15-20 of these emails daily almost 1/2 of my email.

http://www.symantec.com/avcenter/ven...m.worm@mm.html

[FreeArcade]

Originally posted by pixieworld
I think he wanted to send me the virus, knowing it was a virus, but instead of a doc file he sent me something with the extension .lnk, so he didn't send me the actual virus, or am I wrong?

Yes, you are wrong. that file with the .lnk extension is the virus. If you opened that file you are now infected with the virus.

You need to remove that virus from your system. Otherwise it will be emailing you files to other people. I received one which had a proposal document in it. any Microsoft word file on your system and many other types can be sent out without your permission.

You can download a free fix at Symantec.com
<http://www.symantec.com/avcenter/ven...m.worm@mm.html>

[PWR_Paul_Banker]

This is absolutley crazy. *EVERY* person that I know online has gotten this virus in their email. IBM sent out a virus alert this morning to all of its employees. I have recieved this dumb email ~20-25 times so far with massive attatchments. This is really getting on my nerves. Just when i thought that the haha@sexyfun.net (snow white) virus was done with.

Steve thanks for the EMail sentry, i'm going to check that out now, hopefully it will work. It'll be interesting to see how long it takes for the media to pick up on this, since so many people seem to be getting this email.

[Ex]

I'm also getting these funny emails with attachment around 200KB - 1MB..and the message is always..

Hi there,

I've send you this attachment and hope to get an advice from you.

Sincerely..

XXXX


Weird.....I've checked and I'm not infected..but keep receiving like 1/2 of my emails from this attack..and they come from all over the world with a lot of different domain.

[singloon]

Originally posted by Ex
I'm also getting these funny emails with attachment around 200KB - 1MB..and the message is always..

Hi there,

I've send you this attachment and hope to get an advice from you.

Sincerely..

XXXX


Weird.....I've checked and I'm not infected..but keep receiving like 1/2 of my emails from this attack..and they come from all over the world with a lot of different domain.

yeah that's because they're infected (people who have your email address in their address books)

i got a record 233 virus infected attachment emails yesterday around 200 - 500kb in size

i just use my cpanel's webmail to preview and remove those emails before i download using my pop app

[consent]

That was a close call. I almost opened my attachment at Yahoo thinking it was a visitor-contribution then decided to scan it with the Yahoo Norton Anti-virus (my own McAfee expired two months ago).

I have gotten three so far coming from different addresses at Yahoo and several at my AOL address.

[Meowser]

Haha Snow White virus isn't done yet - I received that one tonight. I've gotten this other one about 50 times so far. Set up a rule to just permanently delete the darn thing tonight so hopefully I won't see it again!

[Jan]

I received my first two of "Sircam" today and notified the respective ISPs that the users had a virus and requesting that they notify the 'spreaders' with instructions on how to get rid of it. (Both were unknown to me)

<update> It seems one ISP is checking outgoing mail for viruses!!

This was from the original sender ****************** Virus Warning Message (on the network)

Found virus TROJ_SIRCAM.A in file BasicfatburningSoup.doc.pif
The uncleanable file is deleted.

************************************************** *******
And this was from the ISP later


The TROJ_SIRCAM.A virus was detected in email from
xxxxxxxx@austarnet.com.au (07/24/2001 16:46:38). The action taken was
to delete the attachment (BasicfatburningSoup.doc.pif).

</update>