Virus Warning!!

Post by **bio** » Fri Mar 05, 2004 3:46 pm

I just got this in my inbox, and it may hit the inbox of everyone else on the server:

From: Management@whitewomanblackdog.com

Dear user of "Whitewomanblackdog.com" mailing system,

Some of our clients complained about the spam (negative e-mail content)
outgoing from your e-mail account. Probably, you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.

Pay attention on attached file.

Sincerely,
The Whitewomanblackdog.com team

It came with a lovely *.pif file. If you receive something like this, for the love of all that's good and pure... DONT open it. I didn't send it to you.

I friggen hate viruses.

If you view the header, it shows it actually came from someplace else... but that could be false too.

The virus is the W32.Beagle.K@mm virus. Symantec has all the info on it here.

Moxie · Post by **Moxie** » Fri Mar 05, 2004 3:53 pm

Thanks for the heads up

A team, huh? Does this mean we can start calling you #1?

Post by **bio** » Fri Mar 05, 2004 3:55 pm

"Oh Captain, my Captain" will do just fine.

Moxie · Post by **Moxie** » Fri Mar 05, 2004 4:02 pm

All boys love that poem

AsaJay · Post by **AsaJay** » Fri Mar 05, 2004 4:38 pm

Yup, saw one yesterday, er rather one of my customers did. I got called about it, becauase similar to you folks, they -own- their own domain. So, since they -are- the support people, they thought it mighty odd and suspicious. I told them to delete and ignore.

Thanks for the link to Symantec's explanation.

Post by **bio** » Fri Mar 05, 2004 5:00 pm

I aim to please.

Actually... I aim for the head. I'm just a lousy shot.

Of course, now that the damn worm has my email address in it's expansive database, its spoofing me as the sender and my inbox is getting flooded with "deliver failure" notices.

*sigh*

I just wanna spend a few minutes alone in a room with one of these virus authors. I promise there'll still be a pulse when I leave.

Encap · Post by **Encap** » Fri Mar 05, 2004 5:27 pm

Hey Tone,

I'm going to outsource the insubordinate.net team to India.

Wanna see if I can get them to cut us a 2 for 1 deal?

Post by **eddiecanuck** » Sat Mar 06, 2004 1:19 pm

Just got one today. Here is the body:

Hello user of Eddiecanuck.com e-mail server,

Your e-mail account will be disabled because of improper using in next
three days, if you are still wishing to use it, please, resign your
account information.

Advanced details can be found in attached file.

Sincerely,
The Eddiecanuck.com team

Didn't know I had my own "team"

Not to mention a mysterious "support@eddiecanuck.com"

bugfreezer · Post by **bugfreezer** » Sun Mar 07, 2004 2:52 am

And the most obvious clue is...

Their english stinks!

Post by **bio** » Mon Mar 08, 2004 12:49 am

Encap wrote:Hey Tone,

I'm going to outsource the insubordinate.net team to India.

Wanna see if I can get them to cut us a 2 for 1 deal?

Um... no

But thanks for asking

Encap · Post by **Encap** » Mon Mar 08, 2004 9:46 am

Well, see, there's the joke.

There Is no Insubordinate.net team

It's kinda eerie actually. I walked in the other day, and apache was upgraded as was mysql.

Maybe there IS an insubordinate.net team.

Maybe they HAVE been getting information about account misuse.

Post by **bio** » Mon Mar 08, 2004 11:42 am

It's the linux gnomes.

They quietly compile kernels while you sleep.

Post by **miftah** » Mon Mar 08, 2004 1:37 pm

Kernals are good. With butter and salt especially.