| Poster | Thread | 
|  tomazkid 
  | |  | Re: Virus Warning Posted on 10-Sep-2004 13:35:28
 |  | [ #1 ] | 
 | 
| |
 |  |  
| Team Member 
  |  | Joined: 31-Jul-2003 Posts: 11694
 From: Kristianstad, Sweden
 |  |  |  |  |  
|  | 
 | | I guess this virus only infects Windows-systems?   _________________
 Site admins are people too..pooff!
 | 
 | 
| Status: Offline |  | 
|  | 
|  Toaks 
 | |  | Re: Virus Warning Posted on 10-Sep-2004 15:05:59
 |  | [ #2 ] | 
 | 
| |
 |  |  
| Elite Member 
  |  | Joined: 10-Mar-2003 Posts: 8042
 From: amigaguru.com
 |  |  |  |  |  
|  | 
 | | heh! , last time i got a virus in my mailbag that was amiga related was umm like ...NEVER!
 sucks to be a pc user....
 
 Amiga Owns and the rest is ####e!
 
 
  _________________
 See my blog and collection website! . https://www.blog.amigaguru.com
 | 
 | 
| Status: Offline |  | 
|  | 
|  Anonymous 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 15:10:47
 |  | [ # ] | 
 | 
|  | | If anyone else recieves these fake amigaworld mails then please post the header here or PM one of the staff members. Especially the "Received:" block.
 /Björn
 | 
 | 
|  |  | 
|  | 
|  Mikey_C 
 | |  | Re: Virus Warning Posted on 10-Sep-2004 15:40:02
 |  | [ #4 ] | 
 | 
| |
 |  |  
| Elite Member 
  |  | Joined: 7-Mar-2003 Posts: 3060
 From: Unknown
 |  |  |  |  |  
|  | 
 | | Agreed, All my emails are downloaded to my Amiga using SimpleMail.
 I laugh in the face of Outlook users!!
  
 Mikey C
 _________________
 No cause is lost if there is but one fool left to fight for it.
 | 
 | 
| Status: Offline |  | 
|  | 
|  Ferry 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 16:15:43
 |  | [ #5 ] | 
 | 
| |
 |  |  
| Cult Member 
  |  | Joined: 26-Aug-2003 Posts: 696
 From: Valencia, Spain
 |  |  |  |  |  
|  | 
 | | Yes, the virus only affects Windows systems, but the question is that this message has been done on purpose: someone who knew about previous AW.net HD problems wrote the text and got AW user addresses to send the message with the virus intentionally attached, i.e. is not the virus spreading itself, expecting the message to be trusted by users, given previous AW issues. I really would like to know who's behind this despicable action... :¬(
 Saluditos,
 
 Ferrán.
 _________________
 Amiga user since 1988
 AOS4 Betatester
 Member of ATO Spain
 A1 Cfg
 OS4 SCR
 A1200
 | 
 | 
| Status: Offline |  | 
|  | 
|  fiath 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 16:17:00
 |  | [ #6 ] | 
 | 
| |
 |  |  
| Member 
  |  | Joined: 13-Dec-2002 Posts: 31
 From: Unknown
 |  |  |  |  |  
|  | 
 | | I wouldn't worry too much about it, this seems to happens to many site-admins. I should think it is just some virus that picked up domains from an infected users email address book and started spewing emails everywhere. It is a quite a clever confidence trick.
 Actually I am more concerned about the number of bounces that go back to me informing me I sent a virus to somebody - but again, it is just some virus picking up my email on somebody elses infected machine.
 
 Nothing you can do about either unfortunately.
 
 Update: Ferry, I think it is probably a coincidence since my domain has received exactly the same mails (just with my domains details obviously).
 | 
 | 
| Status: Offline |  | 
|  | 
|  Ferry 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 17:00:58
 |  | [ #7 ] | 
 | 
| |
 |  |  
| Cult Member 
  |  | Joined: 26-Aug-2003 Posts: 696
 From: Valencia, Spain
 |  |  |  |  |  
|  | 
 | | fiath wrote:
 Quote:
 
 | Ferry, I think it is probably a coincidence since my domain has received exactly the same mails (just with my domains details obviously). | 
 
 Yes, you are right:
 
 Virus Encyclopedia
 
 It's just that I didn't know about that subtle, underhand virus. All the virusses I have received have the usual "Hi!" as subject and "See attached file" as body, or something similar. Damn virusses! :¬/
 
 Saluditos,
 
 Ferrán.
 _________________
 Amiga user since 1988
 AOS4 Betatester
 Member of ATO Spain
 A1 Cfg
 OS4 SCR
 A1200
 | 
 | 
| Status: Offline |  | 
|  | 
|  Toaks 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 17:17:47
 |  | [ #8 ] | 
 | 
| |
 |  |  
| Elite Member 
  |  | Joined: 10-Mar-2003 Posts: 8042
 From: amigaguru.com
 |  |  |  |  |  
|  | 
 | | @ferry: hi there , umm well i get mails from myself theese days with SPAM and files attached , so your teory might be true but i seriously doubt it, imho its more of a coincidence......or so i hope...  
 cheerios
 _________________
 See my blog and collection website! . https://www.blog.amigaguru.com
 | 
 | 
| Status: Offline |  | 
|  | 
|  Drule 
 | |  | Re: Virus Warning Posted on 10-Sep-2004 18:07:58
 |  | [ #9 ] | 
 | 
| |
 |  |  
| Amiga Developer Team 
  |  | Joined: 11-Jun-2004 Posts: 50
 From: Harrogate, UK
 |  |  |  |  |  
|  | 
 | | Quote:
 | I laugh in the face of Outlook users!! | 
 
 I use Outlook (not Express) all the time for email - have done for about 5 years now.  I've never, ever had a problem, regardless of the junk received.  It's not simply the software - it's the users; opening attachments without either scanning it first or at the very least expecting it from someone you know is madness.  That coupled with running your regular user account with admin privileges is a recipe for disaster.
 
 I reckon, however, it is only a matter of time before a new Amiga virus outs though.  There's always someone thinking it's a laugh.
 _________________
 Karma: Positive
 | 
 | 
| Status: Offline |  | 
|  | 
|  amigamad 
 | |  | Re: Virus Warning Posted on 10-Sep-2004 19:38:11
 |  | [ #10 ] | 
 | 
| |
 |  |  
| Regular Member 
  |  | Joined: 28-Sep-2003 Posts: 188
 From: England
 |  |  |  |  |  
|  | 
 | | Quote:
 | laugh in the face of Outlook users!! | 
 
 I dont see why i had virus is sent to me before avg ativirus scans and picks up all viruses it wont let you excute them .
  | 
 | 
| Status: Offline |  | 
|  | 
|  agima 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 20:48:38
 |  | [ #11 ] | 
 | 
| |
 |  |  
| Regular Member 
  |  | Joined: 4-Feb-2004 Posts: 197
 From: :morF
 |  |  |  |  |  
|  | 
 | | Quote:
 | comcast.net [24.10.153.40] | 
 
 
 That sounds like it is probably DoomMaster.
 
 
 
 I tried tracing the IP here Trace a Potential Attack but it loses it after the 16th hop from my location.  Maybe it would work better at a different loaction?
 
 
  _________________
 AMIGA...Amiga...amiga...agima...agimA...AGIMA
 | 
 | 
| Status: Offline |  | 
|  | 
|  Ferry 
 | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 21:35:31
 |  | [ #12 ] | 
 | 
| |
 |  |  
| Cult Member 
  |  | Joined: 26-Aug-2003 Posts: 696
 From: Valencia, Spain
 |  |  |  |  |  
|  | 
 | | Hey agima.
 That's what I found with 'whois'
 
 Comcast Cable Communications UTAH-11 (NET-24-10-128-0-1)
 24.10.128.0 - 24.10.255.255
 
 Perhaps that person is 'a son of Utah'? ;¬)
 
 Saluditos,
 
 Ferrán.
 _________________
 Amiga user since 1988
 AOS4 Betatester
 Member of ATO Spain
 A1 Cfg
 OS4 SCR
 A1200
 | 
 | 
| Status: Offline |  | 
|  | 
|  tomazkid 
  | |  | Re: Possible Virus Threat Posted on 10-Sep-2004 23:43:27
 |  | [ #13 ] | 
 | 
| |
 |  |  
| Team Member 
  |  | Joined: 31-Jul-2003 Posts: 11694
 From: Kristianstad, Sweden
 |  |  |  |  |  
|  | 
 | | Quote:
 | comcast.net [24.10.153.40] | 
 
 Didn't Wayne at Amiga.org block all the ip-adresses at 24.10.xxx.xx just to stop Doommaster?
 _________________
 Site admins are people too..pooff!
 | 
 | 
| Status: Offline |  | 
|  | 
|  Wol 
  | |  | Re: Virus Warning Posted on 11-Sep-2004 2:32:26
 |  | [ #14 ] | 
 | 
| |
 |  |  
| Super Member 
  |  | Joined: 8-Mar-2003 Posts: 1009
 From: UK.......Sol 3.
 |  |  |  |  |  
|  | 
 | | @ All
 What dose the .pif extension mean ?
 
 
 As I am 100% Amiga, I dont know.
 _________________
 It is my conviction that killing under the cloak of war is nothing but an act of murder.~Albert Einstein
 | 
 | 
| Status: Offline |  | 
|  | 
|  sicky 
 | |  | Re: Virus Warning Posted on 11-Sep-2004 5:05:17
 |  | [ #15 ] | 
 | 
| |
 |  |  
| Elite Member 
  |  | Joined: 11-Mar-2003 Posts: 2843
 From: Essex, UK
 |  |  |  |  |  
|  | 
 | | @Wol
 "What dose the .pif extension mean? As I am 100% Amiga, I dont know"
 
 I wondered about that too, I have loads of junk e-mails with that extension on attached files! I have also been 100% Amiga to date
  _________________
 SAM 460 with 2GB or RAM, 1000GB HD, 4 port SATA, DVDRW drive and Radeon HD 4650 GFX card.
 | 
 | 
| Status: Offline |  | 
|  | 
|  PM 
 | |  | Re: Possible Virus Threat Posted on 11-Sep-2004 5:57:58
 |  | [ #16 ] | 
 | 
| |
 |  |  
| Member 
  |  | Joined: 8-Mar-2004 Posts: 28
 From: Vancouver, Canada
 |  |  |  |  |  
|  | 
 | | Quote:
 
 
 
 To misquote an (armed) American friend:
 "It's not  viruses that hurt computers it's the people who write them".
 | 
 | 
| Status: Offline |  | 
|  | 
|  Moxee 
  | |  | Re: Virus Warning Posted on 11-Sep-2004 6:24:11
 |  | [ #17 ] | 
 | 
| |
 |  |  
| Team Member 
  |  | Joined: 20-Aug-2003 Posts: 6291
 From: County Yakima, WA State, USA
 |  |  |  |  |  
|  | 
 | | > Poster: sicky Date: 10-Sep-2004 16:05:17>
 > @Wol
 >
 > "What dose the .pif extension mean? As I am 100% Amiga, I dont know"
 >
 > I wondered about that too, I have loads of junk e-mails with that extension on
 > attached files! I have also been 100% Amiga to date
 
 It says here:  "An attachment full of nasties."
 _________________
 Moxee
 AmigaOne X1000
 AmigaOne XE G4
 I'd agree with you, but then we'd both be wrong.
 | 
 | 
| Status: Offline |  | 
|  | 
|  tomazkid 
  | |  | Re: Virus Warning Posted on 11-Sep-2004 6:35:25
 |  | [ #18 ] | 
 | 
| |
 |  |  
| Team Member 
  |  | Joined: 31-Jul-2003 Posts: 11694
 From: Kristianstad, Sweden
 |  |  |  |  |  
|  | 
 | | PIF= Process Interchange Format
 More to read about it here
  _________________
 Site admins are people too..pooff!
 | 
 | 
| Status: Offline |  | 
|  | 
|  aldur 
 | |  | Re: Virus Warning Posted on 11-Sep-2004 13:47:23
 |  | [ #19 ] | 
 | 
| |
 |  |  
| Super Member 
  |  | Joined: 16-Oct-2003 Posts: 1274
 From: Armagh
 |  |  |  |  |  
|  | 
 | | Virus/ Spam generators use spiders to find peoples email address on web pages what they do is search for mailto: in the page.  here is a little trick for web admins to use (until it becomes popular that is then they will pick up on it)
 change mailto: to antispam.php?e= on all pages
 /* php */
 print str_replace(Array("mailto:", "/antispam.php?e=", $output);
 
 then create a antispam.php page that allows a user to fill in a form that gets emailed to the appropraite person.  I suppose you could just redirect to a mailto:  it might work haven't tested it though..
 
 /* php */
 header("location: mailto:");
 
 
 Effectivly you end up with no mail to links and the amount of spam emails is reduced
 _________________
 Aldur
 ------------------------------
 | 
 | 
| Status: Offline |  | 
|  | 
|  SlimJim 
 | |  | Re: Virus Warning Posted on 11-Sep-2004 14:11:35
 |  | [ #20 ] | 
 | 
| |
 |  |  
| Cult Member 
  |  | Joined: 9-Mar-2003 Posts: 693
 From: Uppsala, Sweden
 |  |  |  |  |  
|  | 
 | | In the original post:
 Quote:
 
 | Please do not open these attachements, we never send members attachments, click 'read more' for more details.
 | 
 
 For some reason I found this quite funny.
  .
 SlimJim
 | 
 | 
| Status: Offline |  | 
|  |