New Worm Virus!!!!!!

[disturbed1]

If you recieve an email with the message
<TABLE BORDER=0 ALIGN=CENTER WIDTH=85%><TR><TD><font size=-1>Quote:</font><HR size=1 color=black></TD></TR><TR><TD><FONT SIZE=-1><BLOCKQUOTE>
Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks
</BLOCKQUOTE></FONT></TD></TR><TR><TD><HR size=1 color=black></TD></TR></TABLE>

DO NOT OPEN THE ATTACHMENT.

It may be called "AddZer0v1", or "Rambooster"

And ends with a .pif, or .com extenssion.

You can read more about it here

http://news.cnet.com/news/0-1003-200-6625286.html

If you do recieve an email, report it to the sender.

Once you recieve one, more will follow. I recieved 5 from the same sender in 24 hours, and 3 from another. Of course I did open 'em

[aldus4]

Snap @disturbed1

I'm having the same problem with this message and attachment. As VCDHelp.com is the only website I actually published my email address, some sicko from here must have obtained it. I have received within 4 days now about 15 emails from different senders and all with the same text message but different file attachments. Oddly enough Norton Antivirus email checker checked the file and said "ok".

[El_Mero_Zooter]

yep,
same here, im up to six emails now.
likewise, vcdhelp.com is the only place where i list my web email, obviously its not the site fault, but some bastard booger who should've written a real easy foolproof svcd backup program,

ZtR

[disturbed1]

is it from this guy
Sacha <abela1@home.com>?

I emailed him/her back, asking why the email, since I didn't know who it was.

No reply back, I sent abuse@home a letter. They responded about the worm. Went to Symantec's websit for their file, no virus found.

It's brand new, just discovered 4 or 5 days ago, no anti virus proggie will detect it.

<font size=-1>[ This Message was edited by: disturbed1 on 2001-07-24 13:39:27 ]</font>

[aldus4]

@El_Mero_Zooter
...some bastard booger who should've written a real easy foolproof svcd backup program.

I agree totally

@disturbed1

I have received so many and deleted them. Some had hotmail some home.com addresses some even aol.com. I don't know if these people are victums or culprits.

[Belboz]

<TABLE BORDER=0 ALIGN=CENTER WIDTH=85%><TR><TD><font size=-1>Quote:</font><HR size=1 color=black></TD></TR><TR><TD><FONT SIZE=-1><BLOCKQUOTE>
On 2001-07-24 13:16:08, aldus4 wrote:
Snap @disturbed1

I'm having the same problem with this message and attachment. As VCDHelp.com is the only website I actually published my email address, some sicko from here must have obtained it. I have received within 4 days now about 15 emails from different senders and all with the same text message but different file attachments. Oddly enough Norton Antivirus email checker checked the file and said "ok".

</BLOCKQUOTE></FONT></TD></TR><TR><TD><HR size=1 color=black></TD></TR></TABLE>

I have gotten over 30 of them in the last 3-4 days. I only use the email address listed here on here, so it is definitely some vcdhelp.com users.

This thing does have a destructive payload (1 in 20 chance) for people using the European Date format.

Actually if you take away the extra extension on the attachment your virus scanner will probably catch it. I yanked the pif extension of one and then ran nortons and it caught it. Course its safer to delete them instead of playing with them.

I recommend people scan their systems and if they don't have antivirus software, use one of the free online scanners. They run from your browser and will at least check your bootsector and files out. I recommend this one.

http://housecall.antivirus.com/

You can use it without even registering and it will check all your drives and boot sectors for you.

Funny thing is the people on here must have really fallen for this one. I do Computer/Network Consulting and Contract Programming and usually get the virus of the day from my clients who have me in their address book and unknowingly launch an attachment. (they never listen)

But I only got one email of the Sircam virus from one of my clients. The rest have been to my email account listed here.



<font size=-1>[ This Message was edited by: Belboz on 2001-07-24 14:29:59 ]</font>

[Belboz]

Oh by the way.

In case some of you didn't know, besides the address book this thing gets email address from temporary internet files!

So just using your signature in a posting is good enough.

Guess I should stop using the show signature!

[shochan]

i got hte same msg for the past 5 days from this guy and i wrote him back a nasty gram using every known curse word known to me. oops

[aldus4]

@Belboz

Just downloaded and installed the latest virus catalog from Symantec and it found this new worm virus - it found 3 in temporary directories!!! All deleted - clean again <grin>