Click Here
home features news forums classifieds faqs links search
5779 members 
Amiga Q&A /  Free for All /  Emulation /  Gaming / (Latest Posts)
Login

Nickname

Password

Lost Password?

Don't have an account yet?
Register now!

Support Amigaworld.net
Your support is needed and is appreciated as Amigaworld.net is primarily dependent upon the support of its users.
Donate

Menu
Main sections
» Home
» Features
» News
» Forums
» Classifieds
» Links
» Downloads
Extras
» OS4 Zone
» IRC Network
» AmigaWorld Radio
» Newsfeed
» Top Members
» Amiga Dealers
Information
» About Us
» FAQs
» Advertise
» Polls
» Terms of Service
» Search

IRC Channel
Server: irc.amigaworld.net
Ports: 1024,5555, 6665-6669
SSL port: 6697
Channel: #Amigaworld
Channel Policy and Guidelines

Who's Online
19 crawler(s) on-line.
 15 guest(s) on-line.
 2 member(s) on-line.


 OlafS25,  IRTheBorg

You are an anonymous user.
Register Now!
 OlafS25:  1 min ago
 IRTheBorg:  4 mins ago
 DiscreetFX:  11 mins ago
 MichaelMerkel:  20 mins ago
 Futaura:  29 mins ago
 Bezzen:  35 mins ago
 OneTimer1:  39 mins ago
 Jasper:  41 mins ago
 sTix:  41 mins ago
 dirkzwager:  48 mins ago

Amigaworld.net News   Amigaworld.net News : Possible Virus Threat
   posted by DaveyD on 10-Sep-2004 13:20:20 (4328 reads)
Emails containing attachments with viruses are being sent to members using faked "from:" amigaworld.net addresses, Subject: Warning about your email account

Quote:
Dear user of Amigaworld.net,

Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service.

Further details can be obtained from attached file.

Sincerely,
The Amigaworld.net team http://www.amigaworld.net

Please do not open these attachements, we never send members attachments, click 'read more' for more details.


Here is the email header

Return-Path: < 0cfor@personal.ro >
Received: from chuckles (c-24-10-153-40.client.comcast.net [24.10.153.40])
by amigaworld.net (8.12.11/8.12.11) with SMTP id i8A801VV004047
for < david@amigaworld.net >; Fri, 10 Sep 2004 03:00:04 -0500
Date: Thu, 09 Sep 2004 19:00:29 -0800
To: david@amigaworld.net
Subject: Warning about your e-mail account.
From: support@amigaworld.net
Message-ID: < awhijwtuiajdvqevunm@amigaworld.net >
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------djddvqjeigpxsbhvbmyr"
Status: O

----------djddvqjeigpxsbhvbmyr
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit


The attachment contained the W32.Beagle.J@mm virus in an attachment called TextDocument.pif

If you suspect your computer has the virus, then please download and use this removeal tool - http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle@mm.removal.tool.html
    

Related Links
· More about Amigaworld.net News
· News by DaveyD


Most read story about Amigaworld.net News
Official OS4 Screenshots from Hyperion

Last news about Amigaworld.net News
GoADF! 2.2 has been released
Printer Friendly Page  Send this Story to a Friend

Goto page ( 1 | 2 )

PosterThread
tomazkid 
Re: Virus Warning
Posted on 10-Sep-2004 13:35:28
#1 ]
Team Member
Joined: 31-Jul-2003
Posts: 11694
From: Kristianstad, Sweden

I guess this virus only infects Windows-systems?


_________________
Site admins are people too..pooff!

 Status: Offline
Profile     Report this post  
Toaks 
Re: Virus Warning
Posted on 10-Sep-2004 15:05:59
#2 ]
Elite Member
Joined: 10-Mar-2003
Posts: 8042
From: amigaguru.com

heh! , last time i got a virus in my mailbag that was amiga related was umm like ...NEVER!

sucks to be a pc user....

Amiga Owns and the rest is ####e!


_________________
See my blog and collection website! . https://www.blog.amigaguru.com

 Status: Offline
Profile     Report this post  
Anonymous 
Re: Possible Virus Threat
Posted on 10-Sep-2004 15:10:47
# ]



If anyone else recieves these fake amigaworld mails then please post the header here or PM one of the staff members. Especially the "Received:" block.

/Björn

 
     Report this post  
Mikey_C 
Re: Virus Warning
Posted on 10-Sep-2004 15:40:02
#4 ]
Elite Member
Joined: 7-Mar-2003
Posts: 3060
From: Unknown

Agreed, All my emails are downloaded to my Amiga using SimpleMail.

I laugh in the face of Outlook users!!

Mikey C


_________________
No cause is lost if there is but one fool left to fight for it.

 Status: Offline
Profile     Report this post  
Ferry 
Re: Possible Virus Threat
Posted on 10-Sep-2004 16:15:43
#5 ]
Cult Member
Joined: 26-Aug-2003
Posts: 693
From: Valencia, Spain

Yes, the virus only affects Windows systems, but the question is that this message has been done on purpose: someone who knew about previous AW.net HD problems wrote the text and got AW user addresses to send the message with the virus intentionally attached, i.e. is not the virus spreading itself, expecting the message to be trusted by users, given previous AW issues. I really would like to know who's behind this despicable action... :¬(

Saluditos,

Ferrán.


_________________
Amiga user since 1988
AOS4 Betatester
Member of ATO Spain
A1 Cfg
OS4 SCR
A1200

 Status: Offline
Profile     Report this post  
fiath 
Re: Possible Virus Threat
Posted on 10-Sep-2004 16:17:00
#6 ]
Member
Joined: 13-Dec-2002
Posts: 31
From: Unknown

I wouldn't worry too much about it, this seems to happens to many site-admins. I should think it is just some virus that picked up domains from an infected users email address book and started spewing emails everywhere. It is a quite a clever confidence trick.

Actually I am more concerned about the number of bounces that go back to me informing me I sent a virus to somebody - but again, it is just some virus picking up my email on somebody elses infected machine.

Nothing you can do about either unfortunately.

Update: Ferry, I think it is probably a coincidence since my domain has received exactly the same mails (just with my domains details obviously).

 Status: Offline
Profile     Report this post  
Ferry 
Re: Possible Virus Threat
Posted on 10-Sep-2004 17:00:58
#7 ]
Cult Member
Joined: 26-Aug-2003
Posts: 693
From: Valencia, Spain

fiath wrote:

Quote:
Ferry, I think it is probably a coincidence since my domain has received exactly the same mails (just with my domains details obviously).


Yes, you are right:

Virus Encyclopedia

It's just that I didn't know about that subtle, underhand virus. All the virusses I have received have the usual "Hi!" as subject and "See attached file" as body, or something similar. Damn virusses! :¬/

Saluditos,

Ferrán.


_________________
Amiga user since 1988
AOS4 Betatester
Member of ATO Spain
A1 Cfg
OS4 SCR
A1200

 Status: Offline
Profile     Report this post  
Toaks 
Re: Possible Virus Threat
Posted on 10-Sep-2004 17:17:47
#8 ]
Elite Member
Joined: 10-Mar-2003
Posts: 8042
From: amigaguru.com

@ferry: hi there , umm well i get mails from myself theese days with SPAM and files attached , so your teory might be true but i seriously doubt it, imho its more of a coincidence......or so i hope...

cheerios


_________________
See my blog and collection website! . https://www.blog.amigaguru.com

 Status: Offline
Profile     Report this post  
Drule 
Re: Virus Warning
Posted on 10-Sep-2004 18:07:58
#9 ]
Member
Joined: 11-Jun-2004
Posts: 43
From: Harrogate, UK

Quote:
I laugh in the face of Outlook users!!


I use Outlook (not Express) all the time for email - have done for about 5 years now. I've never, ever had a problem, regardless of the junk received. It's not simply the software - it's the users; opening attachments without either scanning it first or at the very least expecting it from someone you know is madness. That coupled with running your regular user account with admin privileges is a recipe for disaster.

I reckon, however, it is only a matter of time before a new Amiga virus outs though. There's always someone thinking it's a laugh.


_________________
Karma: Positive

 Status: Offline
Profile     Report this post  
amigamad 
Re: Virus Warning
Posted on 10-Sep-2004 19:38:11
#10 ]
Regular Member
Joined: 28-Sep-2003
Posts: 188
From: England

Quote:
laugh in the face of Outlook users!!


I dont see why i had virus is sent to me before avg ativirus scans and picks up all viruses it wont let you excute them .

 Status: Offline
Profile     Report this post  
agima 
Re: Possible Virus Threat
Posted on 10-Sep-2004 20:48:38
#11 ]
Regular Member
Joined: 4-Feb-2004
Posts: 197
From: :morF

Quote:
comcast.net [24.10.153.40]



That sounds like it is probably DoomMaster.



I tried tracing the IP here Trace a Potential Attack but it loses it after the 16th hop from my location. Maybe it would work better at a different loaction?


_________________
AMIGA...Amiga...amiga...agima...agimA...AGIMA

 Status: Offline
Profile     Report this post  
Ferry 
Re: Possible Virus Threat
Posted on 10-Sep-2004 21:35:31
#12 ]
Cult Member
Joined: 26-Aug-2003
Posts: 693
From: Valencia, Spain

Hey agima.

That's what I found with 'whois'

Comcast Cable Communications UTAH-11 (NET-24-10-128-0-1)
24.10.128.0 - 24.10.255.255

Perhaps that person is 'a son of Utah'? ;¬)

Saluditos,

Ferrán.


_________________
Amiga user since 1988
AOS4 Betatester
Member of ATO Spain
A1 Cfg
OS4 SCR
A1200

 Status: Offline
Profile     Report this post  
tomazkid 
Re: Possible Virus Threat
Posted on 10-Sep-2004 23:43:27
#13 ]
Team Member
Joined: 31-Jul-2003
Posts: 11694
From: Kristianstad, Sweden

Quote:
comcast.net [24.10.153.40]


Didn't Wayne at Amiga.org block all the ip-adresses at 24.10.xxx.xx just to stop Doommaster?


_________________
Site admins are people too..pooff!

 Status: Offline
Profile     Report this post  
Wol 
Re: Virus Warning
Posted on 11-Sep-2004 2:32:26
#14 ]
Cult Member
Joined: 8-Mar-2003
Posts: 963
From: UK.......Sol 3.

@ All

What dose the .pif extension mean ?


As I am 100% Amiga, I dont know.


_________________
It is my conviction that killing under the cloak of war is nothing but an act of murder.~Albert Einstein

 Status: Offline
Profile     Report this post  
sicky 
Re: Virus Warning
Posted on 11-Sep-2004 5:05:17
#15 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2828
From: Essex, UK

@Wol

"What dose the .pif extension mean? As I am 100% Amiga, I dont know"

I wondered about that too, I have loads of junk e-mails with that extension on attached files! I have also been 100% Amiga to date


_________________
SAM 460 with 2GB or RAM, 1000GB HD, 4 port SATA, DVDRW drive and Radeon HD 4650 GFX card.

 Status: Offline
Profile     Report this post  
PM 
Re: Possible Virus Threat
Posted on 11-Sep-2004 5:57:58
#16 ]
Member
Joined: 8-Mar-2004
Posts: 28
From: Vancouver, Canada

Quote:
Damn virusses!




To misquote an (armed) American friend:
"It's not viruses that hurt computers it's the people who write them".

 Status: Offline
Profile     Report this post  
Moxee 
Re: Virus Warning
Posted on 11-Sep-2004 6:24:11
#17 ]
Team Member
Joined: 20-Aug-2003
Posts: 6291
From: County Yakima, WA State, USA

> Poster: sicky Date: 10-Sep-2004 16:05:17
>
> @Wol
>
> "What dose the .pif extension mean? As I am 100% Amiga, I dont know"
>
> I wondered about that too, I have loads of junk e-mails with that extension on
> attached files! I have also been 100% Amiga to date

It says here: "An attachment full of nasties."


_________________
Moxee
AmigaOne X1000
AmigaOne XE G4
I'd agree with you, but then we'd both be wrong.

 Status: Offline
Profile     Report this post  
tomazkid 
Re: Virus Warning
Posted on 11-Sep-2004 6:35:25
#18 ]
Team Member
Joined: 31-Jul-2003
Posts: 11694
From: Kristianstad, Sweden

PIF= Process Interchange Format

More to read about it here


_________________
Site admins are people too..pooff!

 Status: Offline
Profile     Report this post  
aldur 
Re: Virus Warning
Posted on 11-Sep-2004 13:47:23
#19 ]
Super Member
Joined: 16-Oct-2003
Posts: 1273
From: Birmingham, UK

Virus/ Spam generators use spiders to find peoples email address on web pages what they do is search for mailto: in the page. here is a little trick for web admins to use (until it becomes popular that is then they will pick up on it)

change mailto: to antispam.php?e= on all pages
/* php */
print str_replace(Array("mailto:", "/antispam.php?e=", $output);

then create a antispam.php page that allows a user to fill in a form that gets emailed to the appropraite person. I suppose you could just redirect to a mailto:<email> it might work haven't tested it though..

/* php */
header("location: mailto:<email>");


Effectivly you end up with no mail to links and the amount of spam emails is reduced


_________________
Aldur
------------------------------

 Status: Offline
Profile     Report this post  
SlimJim 
Re: Virus Warning
Posted on 11-Sep-2004 14:11:35
#20 ]
Cult Member
Joined: 9-Mar-2003
Posts: 693
From: Uppsala, Sweden

In the original post:

Quote:
Please do not open these attachements, we never send members attachments,
click 'read more' for more details.


For some reason I found this quite funny.
.
SlimJim

 Status: Offline
Profile     Report this post  

Goto page ( 1 | 2 )

[ home ][ about us ][ privacy ] [ forums ][ classifieds ] [ links ][ news archive ] [ link to us ][ user account ]
Copyright (C) 2000 - 2019 Amigaworld.net.
Amigaworld.net was originally founded by David Doyle