| Author
|
virus alert!!
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Feb 27, 2004 11:24
|
I have recieved three emails in the past two days from members of isratrance that have attachments that are infected with a virus.
After some searching and contacting the email address where the email came from, I have found out that they did not send me this mail. I believe this because I recieved something like this from 2 other ppl.
The only thing I can think is taht someone is somehow accessing these ppls emails and sending out these messages.
Please let me know if anything comes up... thank you.
-Nik |
|
|
ShivaS
IsraTrance Team
Started Topics :
51
Posts :
861
Posted : Feb 27, 2004 12:25
|
nope, it's impossible. thought u might see @isratrance.com as from field.
to show us exactly what went wrong keep the e-mail and print there mail headers
if u don't know what is that, gimme your mail prog name and i will guide you on how to do it...
 I may rise, but I won't shine ... |
|
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 3, 2004 13:03
|
|
okay I got another one, what do I do now? I need to give you my mail prog? What is this? |
|
|
|
karnaf
IsraTrance Full Member
Started Topics :
60
Posts :
1745
Posted : Mar 3, 2004 18:04
|
Plz specify which mail software you use (webmail like hotmail or yahoo!, or a software like outlook or eudora) so we can help you find the mail headers necessary.
Please REMOVE my cellphone number from any SMS spam list you may have. Thanks.
http://www.savetherhino.org |
|
|
|
sage2012
IsraTrance Junior Member
Started Topics :
27
Posts :
413
Posted : Mar 5, 2004 04:59
|
i have received 2 emails from other isratrance users that had 23kb virus attatchments that were blocked in my hotmail mailbox... i've already sent replies to both of the senders to let them know that their computers have sent these out...
i was wondering if maybe this is an Outlook-based virus (i don't use Outlook myself, but i am sure that there are many people on here that do), but since i haven't written to either of these people before via email and since this is the only forum that i use my address with (zuvuya_2012@hotmail.com), i can't help but wonder if perhaps this virus is taking information/addresses from isratrance profiles?
here is what i received..
1)
from: hujaboy@hotmail.com
header: Re: Here is the document
attatchment: document_full.pif (23 KB)
text: Your file is attached.
2)
from: omridiamant@hotmail.com
header: Re: Your music
attatchment: mp3music.pif (23 KB)
text: Here is the file.
michael
www.atlantapsytrance.net
http://touchsamadhi.com/artists/michael-curran
http://soundcloud.com/sage2012
http://mixcloud.com/sage2012/ |
|
|
|
ShivaS
IsraTrance Team
Started Topics :
51
Posts :
861
Posted : Mar 5, 2004 11:14
|
in hotmail define in options to see full mail headers
then we would be able to see the relevant information if those users really had viruses or something else happened
I may rise, but I won't shine ... |
|
|
|
sage2012
IsraTrance Junior Member
Started Topics :
27
Posts :
413
Posted : Mar 6, 2004 18:23
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 9, 2004 06:27
|
aha! Finaly got one of these bastards...
so I use hotmail, and this is about the 5th one I received. Yes and I only use this email for this site, So here is the full info:
From : <em@fl.ha>
Sent : Friday, March 5, 2004 8:53 PM
To : spliffnik[@]hotmail.com
Subject : lol
| | | Inbox
Hotmail has permanently blocked the following potentially unsafe attachment(s): note.exe (32 KB) More Info...
MIME-Version: 1.0
Received: from hotmail.com ([81.32.181.250]) by mc1-f35.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824); Fri, 5 Mar 2004 12:53:33 -0800
X-Message-Info: 6sSXyD95QpUp7Rpz2AuJJegarbQ8D/UY
X-MSMail-Priority: Normal
Return-Path: em@fl.ha
Message-ID: <MC1-F35myDK087MBFUv00044239@mc1-f35.hotmail.com>
X-OriginalArrivalTime: 05 Mar 2004 20:53:33.0438 (UTC) FILETIME=[EC15D9E0:01C402F3]
Hope this helps..looking forward to your reply!
Thanks,
spliffnik
|
|
|
|
ShivaS
IsraTrance Team
Started Topics :
51
Posts :
861
Posted : Mar 9, 2004 08:07
|
we need full mail headers, plz enable it in options.
all i see is that hotmail received mail.
mail headers will tell us the route it made and through what mail servers.
still not enough info...
I may rise, but I won't shine ... |
|
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 9, 2004 11:24
|
From : <em@fl.ha>
Sent : Friday, March 5, 2004 8:53 PM
To : spliffnik[@]hotmail.com
Subject : lol
| | | Inbox
Hotmail has permanently blocked the following potentially unsafe attachment(s): note.exe (32 KB) More Info...
MIME-Version: 1.0
Received: from hotmail.com ([81.32.181.250]) by mc1-f35.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824); Fri, 5 Mar 2004 12:53:33 -0800
X-Message-Info: 6sSXyD95QpUp7Rpz2AuJJegarbQ8D/UY
X-MSMail-Priority: Normal
Return-Path: em@fl.ha
Message-ID: <MC1-F35myDK087MBFUv00044239@mc1-f35.hotmail.com>
X-OriginalArrivalTime: 05 Mar 2004 20:53:33.0438 (UTC) FILETIME=[EC15D9E0:01C402F3]
--------------------------------------------------------------------------------
View E-mail Message Source
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0009_000070AD.000072F4"
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Your bill.
Content-Type: application/octet-stream; name="note.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;filename="note.exe"
Attachment : Hotmail has permanently blocked the following potentially unsafe attachment(s): note.exe (32 KB) More Info...
I went to options, and under 'mail display settings' I chose the 'Advanced' for 'message headers', then went to my inbox, clicked on the infected message, and copied and pasted everything in the message. I hope this is enough. If not, please send me more detailed instructions so I can do it correctly. From what you have told me to do, I don't see any other things I can do besides what is written here.
Thanks again,
spliffnik
|
|
|
|
ShivaS
IsraTrance Team
Started Topics :
51
Posts :
861
Posted : Mar 9, 2004 17:18
|
ok...
recevied from hotmail.com ( 81.32.181.250)
and it's something like 250.Red-81-32-181.pooles.rima-tde.net (from: em@fl.ha)
if that's all the info u have
so seems someone connected to the IP above uses probably outlook express with instant hotmail account and got virus on his computer.
cause looks like hotmail sent to hotmail.
what i am waiting for is for some mail coming from isratrance.com that u mentioned in topic.
I may rise, but I won't shine ... |
|
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 10, 2004 15:58
|
sorry, didn't mean to confuse you- I didnt write clearly enough, but none of the emails came from an address ending in @isratrance.com (if thats waht you mean).
I only guessed it came from isratrance because the first few emails had names that were somewhat trance related (like fluorodharma, and some others I cant remember) and also I dont use this email address for anything other than isratrance. And there was the other guy who had the same happen to him, he also only use his email for isratrance. So I guess the virus is not from isratrance directly, but getting spread from isratrance member to isratrance member. (other guy mention he recieved one of these emails from Hujaboy, who is also member of this forum)
I dont know anything about this kind of stuff, so I apologize if the stuff I say makes no sense. I am trying my best, I dont know if this is something you guys can fix/stop, but thought it was good to know there is a virus floating around among the members of this forum.
Thanks again,
Nik |
|
|
|
Cyber Punk
IsraTrance Team
Started Topics :
29
Posts :
759
Posted : Mar 10, 2004 17:03
|
It's very simple, some of the members got virus, it scans user's address book and send itself to every address it finds... and so on...
P.S. I receive 5-6 emails with virus every day. -=Lead System Designer=- |
|
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 11, 2004 04:55
|
|
spliffnik
IsraTrance Full Member
Started Topics :
53
Posts :
663
Posted : Mar 19, 2004 09:07
|
Ok, I am thinking maybe if the virus is floating around isratrance then it could have something to do with having my email address posted in my profiles. Even if it is not, I would still very much like to delete my email address from my profile. How do I do this? Please let me know when you have time.
Thanks,
spliffnik |
|
|
|
