Originally Posted By: gbeaumont This post was automatically imported from our archived forum.
if you do not know the sender
if the attachment ends with a .pif extension
any think that has a Microsoft address but an un familiar extension.
any e-mail with an attachment around 95-105 kb
any email attachment that comes to you looking like a mail system delivery failure notice.
Also reference Chris's e-mail last week and check your hard drive for the specified files, if anyone has not done this and no longer has his e-mail me please get in touch with Chris or myself and I'll forward it again.
Originally Posted By: gbeaumont This post was automatically imported from our archived forum.
Hi to all I should have done this to start with here is chris’s e-mail from last week for those who missed it…
1. It appears that one of our members (perhaps in Texas or Oklahoma, but not
necessarily) is infected with the W32.Sobig.F@mm virus. This virus is
sending itself to other NACHI members with a faked "from" address of
NACHITest@inxil.com. Any e-mails from NACHITest@inxil.com should be blocked
and/or deleted immediately. This e-mail address was used with NACHI's
original exam, but no longer exists.
** Please check your computer for WINPPR32.EXE and/or WINSTT32.DAT - if your
computer is infected, visit
http://hq.mcafeeasap.com/dispVirus.asp?virus_k=100561 for information on
virus removal. To search for the virus on a Microsoft Windows PC, click the
Start Menu, choose "Search," and then click on "For Files and Folders."
(this may differ slightly depending on what version of Windows you use).
Originally Posted By: Chris Morrell This post was automatically imported from our archived forum.
The virus fakes its from e-mail address to an address that it finds on a website the infected person has recently visited. I’ve seen one virus go out from “design@cmorrell.com” which I do use, but know is not infected.
Be careful with all e-mail with the following subjects:
Your details
Thank you!
Re: Thank you!
Re: Details
Re: Re: My details
Re: Approved
Re: Your application
Re: Wicked screensaver
Re: That movie
Also, with the following attachments:
your_document.pif
document_all.pif
thank_you.pif
your_details.pif
details.pif
document_9446.pif
application.pif
wicked_scr.scr
movie0045.pif
And with either of these messages:
See the attached file for details
Please see the attached file for details
This virus will terminate itself on Sept. 10th. But be careful until then.
Originally Posted By: Ken Papp This post was automatically imported from our archived forum.
Unless you know who the e-mail is from…the RE: is a spam ploy to try and get you to open the mail and usally full of spy-ware. The guys that make the bug are using the same tatic. Got this info from my brother in law and he is manager of an interner service provider. He says general rule…if you question who it might be from dont open it, just delete. Had to put my 1 cent in…cannot afford 2 lol Ken
here is chris’s e-mail from last week for those who missed it…