!!! IMPORTANT NEW VIRUS ALERT !!!

Okay... do as I say not as I do... this forum is not for these types of posts, but another nasty virus is making the rounds, and since I can post this and not get in trouble... I will. The harrowing Windows worm (bagle.K) that comes embedded in a password protected zip file is making it past the antivirus screeners protecting mail servers around the world (including ours). This is because the virus checkers aren't able to open the zip file - a "social engineering" trick is used where the password is supplied to you in the body of the email, with instructions to open it. If you receive a password protected zip file, don't open it - delete it immediately.

Yes, thanks for the post! I got two of those emails in my mailbox today. They are blatantly suspicious reading, thats for sure. Of course, once again, the trusty old Macintosh is immune to the "diseases" of the other side...

Damn!

Now i'll never find out how to attract females using chocolate!

Originally posted by IronDogg
Yes, thanks for the post! I got two of those emails in my mailbox today. They are blatantly suspicious reading, thats for sure. Of course, once again, the trusty old Macintosh is immune to the "diseases" of the other side...

Mac users unite! and yeah, I got a couple of emails like that from the lady that runs the east lansing film festival. I thought they might possibly be legit, but I'm lazy and don't open attachments ever. thanks for the heads up.

thanks for the heads up SkepticOverlord!! I just recently had to dump my hard drive and start over from those pesky viruses, because my norton didn't catch it in time!

Boy am I glad I don't have a Mac.

I can't stand those things.

Anyone who is intelligent won't get a virus.

should it look something like this?

From [email protected] Thu Mar 4 01:32:46 2004
Return-Path:
Received: from MSS00 (wsip-68-99-64-17.ok.ok.cox.net [68.99.64.17])
by droog.sdf-eu.org (8.12.10/8.12.10) with SMTP id i241Wg3M005367
for ; Thu, 4 Mar 2004 01:32:45 GMT
Date: Wed, 03 Mar 2004 19:32:55 -0600
To: [email protected]
Subject: ^_^ mew-mew (-:
From: [email protected]
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------flgwolowvuuimvjdnpus"
[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Argh, i don't like the plaintext

password: 41587

[-- Attachment #2: TextDocument.zip --]
[-- Type: application/octet-stream, Encoding: base64, Size: 28K --]
Content-Type: application/octet-stream; name="TextDocument.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="TextDocument.zip"
[-- application/octet-stream is unsupported (use 'v' to view this part) --]

Originally posted by echelon
should it look something like this?

That's one of the new Bagle/Beagle variants, yes.

-B.

for the genius that sent that... ultra_phoenix doesn't live in oklahoma

Originally posted by EliteXizer
Boy am I glad I don't have a Mac.

I can't stand those things.

Anyone who is intelligent won't get a virus.

anyone whos inteillgent doenst need a mac.

Originally posted by echelon
for the genius that sent that... ultra_phoenix doesn't live in oklahoma

Like most of the new mass-mail trojans going around (MyDoom, Beagle, Netsky), the From: address is spoofed. The virus didn't actually come from the ultra-phoenix account, but from whichever infected computer has that email address in an address book or other document.

MyDoom is up to variant H
Beagle is up to variant K
Netsky is up to variant F

Check Symantec for details.

-B.

i recieved an email on my nokia 3650 today with a password protected zip file. i thought it might be a virus so i didnt open it. i wonder what would have happened if i did. anyways, watch out for this in your wireless email inboxes.

Originally posted by Banshee

Originally posted by echelon
for the genius that sent that... ultra_phoenix doesn't live in oklahoma

Like most of the new mass-mail trojans going around (MyDoom, Beagle, Netsky), the From: address is spoofed. The virus didn't actually come from the ultra-phoenix account, but from whichever infected computer has that email address in an address book or other document.

i understand that, but this one appeared intentional... i don't even think that's ultra_phoenix's real address...

[Edited on 3-3-2004 by echelon]

Originally posted by echelon

Originally posted by Banshee

Originally posted by echelon
for the genius that sent that... ultra_phoenix doesn't live in oklahoma

Like most of the new mass-mail trojans going around (MyDoom, Beagle, Netsky), the From: address is spoofed. The virus didn't actually come from the ultra-phoenix account, but from whichever infected computer has that email address in an address book or other document.

i understand that, but this one appeared intentional... i don't even think that's ultra_phoenix's real address...

[Edited on 3-3-2004 by echelon]

Looks like you got someone out to get ya, ech. Not real good for a conspiracy theorist.

Thanks for the heads up.. I recieved one right before I read this post.

Originally posted by IronDogg
Yes, thanks for the post! I got two of those emails in my mailbox today. They are blatantly suspicious reading, thats for sure. Of course, once again, the trusty old Macintosh is immune to the "diseases" of the other side...

So are my Linux boxes I am so glad I switched years ago, lol.