grayhaze grayhaze

Let's play the 'name the virus spreader' game! :)

Let's play the 'name the virus spreader' game! :)

Okay, I'm getting heaps of these damn virus e-mails as a result of the latest idiot virus creation 'Doom'. However, I think I can at least help one person to realise they have the virus on their machine.

Today I got an e-mail to my PayPal donations e-mail account with a spoofed from address of 'ian @ stardock.com' (note the spaces to prevent further spread). So if you have made a donation to me in the past for my skinning work (and let's face it, that narrows it down a heck of a lot ) and also know an Ian who works at Stardock, you might want to scan your machine for the virus.

This public service has been brought to you by grayhaze.com and the letter 'V'.
16,671 views 54 replies
Reply #26 Top
Dear Crae:

If you would be so kind as to delete your most essential files, and also the files that other viri tend to delete. But remember to send this request to all your friends.

I'm so glad you are excited! I am too as this is my first experience at authoring such a destructive device. I am now more successful than my wildest dreams. I shall be sure to go down in history.

Poor Person's Virus
Reply #28 Top
goodmorphing

Reply #29 Top
urg I finally got an email from my server. yes my server telling me that I had been sending out evil emails. they say that I have a virus on my system. I know for a fact I don't and that the bug has instead been sending out emails with my name on it. I know that this is true because its happened to many people here at my school.
Reply #30 Top
Travis if i find a virus on my system I am going to come over there and wipe your hard drive
Reply #31 Top
Look I have the a brand spanking new version of the coorporate mcafee. my school requires it on my computer, and its licensed for the school so I get it free. I am alomst 100% postive that I don't have a virus on my computer. now yours, well who knows what little goodies I might have added.
[Message Edited]
Reply #33 Top


don't worry I didn't
[Message Edited]
Reply #34 Top
i know I was just joking.
Reply #35 Top
I knew that
Reply #36 Top

I am alomst 100% postive that I don't have a virus on my computer.

Wow....I feel so reassured....

Reply #37 Top
hmm I am getting bad vibes from Jafo.
Reply #38 Top

Travis.....'almost 100%' is worthless.

You need to be absolutely certain....anything less is failure....

Reply #39 Top
'Virus free' is like 'pregnant' it is an absolute....you cannot be more, or less, of either...
Reply #40 Top
lets put it this way. If there is a virus on my computer there is no way for me to know it. its like the symptomless disease.
Reply #41 Top
Help me think this one out....if your server(email service) sent you a note saying stop sending out the nasties. How'd they know that they were coming or not coming from you....your IP address is the only way that I can think that they could be so sure. I can't see them just firing off a note to you because the from field says Travis-at-Kong-dot-UsedToBeCrazy, well you know what I mean. Does the new virus spoof IP addresses somehow? Have you gone to GRC or somewhere else like it that scans ports to make sure you are walking around with you fly open?
Reply #42 Top
Regarding email protection. When we post our email addresses in these discuss groups...is there any way we can have them spaced such as.... username @ domain.com ... so as not to be picked up by emailbots that hunt for email addresses? I use something on my website that scrambles my email address so its not caught by these bots.



Powered by SkinBrowser!
Reply #43 Top
Dear Poor Person's Virus,

I deleted my c:\windows directory. Do you think that covers all essential files? Also, I wanted to send your message to all my friends, but I just realised I haven't got any. Would you mind if I sent it to your friends instead?

It's going to be troublesome if the both of us don't have friends. How are you going to be a successfull virus if you can't spread!?
Reply #44 Top
Essencay: The mailserver just replies to whatever address is set as reply-to. Anyone can spoof that.
Reply #45 Top
Dear Crae:

Well, the Window's directory is a good start. Do you know any other trendy files that you really need? If you do, please delete those too. I really, really am depending on you to help me build my career.

No friends? Maybe you could try your family... surely you must have a big family.

You could send them to my friends of course, but for some reason I lost track of them after I sent my beta version.

Thanks in advance for making me such a successful virus. This way I am doing at least as much damage as everyone else! And so easy too! I know I can depend on you to do the right thing.

Poor Virus
Reply #46 Top
im telling ya this poor virus is the most polite virus iv seen in a while....
Reply #47 Top
I think I just topped the record for receiving spam mail. When I logged in this morning I had 22 thousand 4 hundred and 86 spam messages in my inbox. Had to phone my server to delete them.



Powered by SkinBrowser!
Reply #48 Top
22 THOUSAND?! You've been mailbombed my friend.
Reply #49 Top
/me can't come to the phone right now: some virus made him wipe out his drive, so he has to fix that
Reply #50 Top
i had to dig for this thread. thought i'd bring it back with a bit of cutionary info. i'm norton-religious, but i sat down at my desk this morning to find an email in my box generated from an 'anti-virus administrator' saying a message attempting to be sent from my personal email addie (which comes through this box as well as my groupwise work addie) had been blocked because of a virus called Worm.SCO.A , in an email called 'test' that was going to some guy @gettaphone.com . i heard SCO got hit pretty hard this weekend from MYDOOM. anyway, this was DISPITE A FULL SYSTEM SCAN run on friday night that turned up nothing. so i updated and i'm scanning now but this thing made it through my corporate nets and then my own net (i'm the only one here who uses updated anti-virus software). so keep your eyes open, fellas. i'll let you know what my fullscan turns up. i'm also curious if this looks like clever ruse. it says it comes from 'system anti-virus administrator . and host-rocket is just some domain retailer. until my IT guys come in to verify this is a domain they recognize, anyone have any insight?


Attention: ### @mverzella.com


A virus was found in an Email message you sent.
The Email Scanner intercepted it and stopped the entire message
from reaching its destination.

The virus was reported to be:

Worm.SCO.A


Please update your virus scanner/signatures or contact your local
IT support personnel as soon as possible. As you may have a virus
or a Trojan program installed on your system. For any questions
regarding the virus policies of this network, please contact
HostRocket.com Support Personnel. Support may be contacted via
Email at support.com or through the support website
located at http://www.rocketsupport.com.


Your message was sent with the following envelope:

MAIL FROM: ### @mverzella.com
RCPT TO: ### @gettaphone.com

... and with the following headers:

---
MAILFROM: ### @mverzella.com
Received: from pcp01640074pcs.rocsth01.mi.comcast.net (HELO mverzella.com) (##.##.###.###)
by mx3.hrnoc.net with SMTP; 1 Feb 2004 23:11:14 -0000
From: ### @mverzella.com
To: ### @gettaphone.com
Subject: Test
Date: Sun, 1 Feb 2004 18:11:33 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_5A2E6264.07AD1DE8"
X-Priority: 3
X-MSMail-Priority: Normal


---