The "Freeola Customer Forum" forum, which includes Retro Game Reviews, has been archived and is now read-only. You cannot post here or create a new thread or review on this forum.
I have received an E-mail from someone called Ozma Saleem([email protected]), at two of my Freeola addresses, both the same E-mail, and with and attachment, called "offer richard turgoose.doc", but is really a .inc file. Is anyone else getting this, and I fear it could be a virus. I could be wrong, but wanted to see to make sure.
Thanx ...
Thanx ...
The work involved in keeping such a list updated and not full of hoaxs is a bit too much for Freeola. The best this to do is use the main virus warning sites. The best site to go to is http://www.symantec.com/avcenter/ as they are the most up to date.
nice idea cjh
With the amount of security threats and warnings around these days, It is comming very difficult to stay up to date with them all. Also with lots of hoax's and false information floating around out their, It would be nice to have this information in one place. Especially as they affect everyone including SR.
With the amount of security threats and warnings around these days, It is comming very difficult to stay up to date with them all. Also with lots of hoax's and false information floating around out their, It would be nice to have this information in one place. Especially as they affect everyone including SR.
I'm not sure if this would pee to many people off ... but could Freeola make a Web Page/Mailling List for warnings, so we are alerted about this things, when someone finds out they excist??
That is most definitely a virus, in fact its a new one. Due to an increased rate of virus submissions, The Symantec AntiVirus Research Center (SARC) has upgraded W32.Sircam.Worm@mm from a level 3 to a level 4 virus threat.
W32.Sircam.Worm@mm contains its own SMTP engine, and propagates in a manner similar to the W32.Magistr.Worm.
Due to what appears to be a bug, this worm does not replicate under Windows NT or 2000.
SARC has created a tool to remove this worm.
CAUTION: In some cases, if you have had NAV quarantine or delete infected files, you will not be able to run .exe files, however you will still be able to run the removal tool.
Payload Trigger: 1) October 16th, or some attached file contents, triggers file deletion payload. 2) If the file deletion occured, or after 8000 executions, triggers the space filler payload.
Payload:
Large scale e-mailing: The worm appends a random document from the infected PC to itself and sends this new file via email
Deletes files: 1 in 20 chance of deleting all files and directories on C:. Only occurs on systems where the date is October 16 and which are using D/M/Y as the date format. Always occurs if attached file contains "FS2" not followed by "sc".
Degrades performance: 1 in 50 chance of filling all remaining space on the C: drive by adding text to the file c:\recycled\sircam.sys
Releases confidential info: It will export a random document from the hard drive by appending it to the body of the worm
Subject of email: Random subject - the filename of the attachment
Name of attachment: A file from the sender's computer with the extension .bat, .com, .lnk, or .pif added to it.
Size of attachment: at least 134kb long
Shared drives: searchs for shared drives and copies itself to those it finds
W32.Sircam.Worm@mm contains its own SMTP engine, and propagates in a manner similar to the W32.Magistr.Worm.
Due to what appears to be a bug, this worm does not replicate under Windows NT or 2000.
SARC has created a tool to remove this worm.
CAUTION: In some cases, if you have had NAV quarantine or delete infected files, you will not be able to run .exe files, however you will still be able to run the removal tool.
Payload Trigger: 1) October 16th, or some attached file contents, triggers file deletion payload. 2) If the file deletion occured, or after 8000 executions, triggers the space filler payload.
Payload:
Large scale e-mailing: The worm appends a random document from the infected PC to itself and sends this new file via email
Deletes files: 1 in 20 chance of deleting all files and directories on C:. Only occurs on systems where the date is October 16 and which are using D/M/Y as the date format. Always occurs if attached file contains "FS2" not followed by "sc".
Degrades performance: 1 in 50 chance of filling all remaining space on the C: drive by adding text to the file c:\recycled\sircam.sys
Releases confidential info: It will export a random document from the hard drive by appending it to the body of the worm
Subject of email: Random subject - the filename of the attachment
Name of attachment: A file from the sender's computer with the extension .bat, .com, .lnk, or .pif added to it.
Size of attachment: at least 134kb long
Shared drives: searchs for shared drives and copies itself to those it finds
Very cheesy, Ozma/Dav1d! Nice one! :)
Dav1d, your tagline is the same.
Whats wrong with Ozma?!
Anyone with a name like Ozma sounds dodgy to me......
Sorry all you people out there called Ozma!
Sorry all you people out there called Ozma!
If it said "I send you this file in order to have your advice" then it's a virus.
I have received an E-mail from someone called Ozma Saleem([email protected]), at two of my Freeola addresses, both the same E-mail, and with and attachment, called "offer richard turgoose.doc", but is really a .inc file. Is anyone else getting this, and I fear it could be a virus. I could be wrong, but wanted to see to make sure.
Thanx ...
Thanx ...