ATTN: AMV Creator with a VIRUS

This forum is for the general discussion of Anime Music Videos.

Postby mexicanjunior » Tue Oct 22, 2002 4:18 pm

Kusoyaro wrote:I only use Hotmail (aside from my work address, which I assure you is virus-free), so seeing as this is probably an Outlook virus, I very much doubt that I am the source.


Same here, I don't use outlook at all on my home PC yet have gotten emails stating I have been sending a virus. I ran the Trend Micro free scan last night and came up all clean. If anyone without Norton or Mcafee want to check their PC out, a free can be found here...

http://housecall.trendmicro.com/
User avatar
mexicanjunior
 
Joined: 27 Jun 2001
Location: Dallas, TX
Status: It's a process...

Postby klinky » Tue Oct 22, 2002 4:22 pm

The reason I don't have the virus yet is because I don't keep any of you losers in my address book :twisted: </neo hentai master>



~klinky
User avatar
klinky
 
Joined: 23 Jul 2001
Location: Cookie College...

Postby mexicanjunior » Tue Oct 22, 2002 4:26 pm

klinky wrote:The reason I don't have the virus yet is because I don't keep any of you losers in my address book :twisted: </neo hentai master>

~klinky


I don't even have an address book. =\
User avatar
mexicanjunior
 
Joined: 27 Jun 2001
Location: Dallas, TX
Status: It's a process...

Postby Paul Kievits » Tue Oct 22, 2002 5:24 pm

Hmm, Wonka said I sent him a virus email but the thing is I've only contacted him via a pm here and via hotmail. Besided, I don't ever open attachments and don't recall ever getting a virus email. The way I see it there are 3 options:

1. This is the smartest virus ever; It opens internet explorer, goes to hotmail, knows my login name and password (which are not cookied or saved anywhere), finds Wonka off of an email I once recieved by him (he's not in my adress book) and sends him a virus file I don't even have.

2. The hotmail server is infected and a lot of people are going to be screwed.

3. The a-m-v.org server is infected (hey Hsien has been getting emails from people he doesn't even have contact with or know).

Any other ideas.

BTW. My virus check was negative.
Get my 5th video "Mass Murderer": here
User avatar
Paul Kievits
 
Joined: 22 Nov 2001
Location: Vlaardingen, The Netherlands

Postby AbsoluteDestiny » Tue Oct 22, 2002 5:31 pm

Vegeta4Pres - all that means is that the person infected has your email address - it doesnt mean the virus came from you.

OK, to narrow this down...


1) The person uses Windows
2) The person uses outlook
3) The person is probably american as the email I received came via netservers.net which is a LA-based company and originated from charter-stl.com

the last one could be faked by the virus though, I think.
User avatar
AbsoluteDestiny
 
Joined: 15 Aug 2001
Location: Oxford, UK

Postby Garylisk » Tue Oct 22, 2002 5:32 pm

is wonka on your ICQ list? in his profile, does he list his real email address? or maybe on his AIM profile? or anything else? the virus looks at instant messenger programs and other such things to find email addreses.
Get a life? I'm a gamer! I have lots of lives!
User avatar
Garylisk
 
Joined: 17 Aug 2001
Location: Equestira
Status: Littlecolt

Postby Garylisk » Tue Oct 22, 2002 5:34 pm

AbsoluteDestiny wrote:3) The person is probably american as the email I received came via netservers.net which is a LA-based company and originated from charter-stl.com



Crap, I use outlook, windows, and my ISP is charter-stl.com

Maybe I should scan for the cirus again, I might be the one sending out this stuff.... but I ran the removal tool yesterday and it said i was not infected. This is so confusing. :P
Get a life? I'm a gamer! I have lots of lives!
User avatar
Garylisk
 
Joined: 17 Aug 2001
Location: Equestira
Status: Littlecolt

Postby Red Wolf » Tue Oct 22, 2002 7:47 pm

Vegeta for president wrote:2. The hotmail server is infected and a lot of people are going to be screwed.


Aside from the fact that would suck for a lot of y'all that would EXTREMELY funny. I can just see the news blurp now...
User avatar
Red Wolf
 
Joined: 01 May 2002
Location: Atlanta, GA

Postby trythil » Tue Oct 22, 2002 10:26 pm

Vegeta for president wrote:1. This is the smartest virus ever; It opens internet explorer, goes to hotmail, knows my login name and password (which are not cookied or saved anywhere), finds Wonka off of an email I once recieved by him (he's not in my adress book) and sends him a virus file I don't even have.


Nah, a smart virus would be one that propagated itself through printers via PostScript. This is theoretically possible on some printers, like a few HP models; if I recall correctly, they have a PostScript interpreter built into their (flashable) firmware.

Imagine the fun you could have with something like that.

Of course, I didn't respond in any useful way there, and I'm sure #1 was meant to be funny.

Most likely it's just some random psycho who has a lot of the more famous AMV creators' e-mail addresses in his Outlook databases for some reason. There's really nothing that can be done about it, except praying that whoever it is figures out that his b0x0rz have been 0wn3d.

oh yeah. Hey, AD, could you post the full headers, just in case somebody here is any good at tracking things down? They're not the best way to track somebody, but they can sometimes be useful.
This is a block of text that can be added to posts you make. There is a 512 character limit.
trythil
is
 
Joined: 23 Jul 2002
Location: Llanfairpwllgwyngyllgogerychwyrndrobwllllantysiliogogogoch

Postby Kusoyaro » Mon Oct 28, 2002 10:58 am

I just got one from AXNY@spja.org :shock:
I have no idea how to use this new forum.
User avatar
Kusoyaro
LEGENDARY!!!
 
Joined: 16 Jan 2001
Location: HOT FUCKING

Postby OmniStrata » Mon Oct 28, 2002 11:19 am

I'm virus immune since NOBODY EMAILS ME!


^_^
"Strength lies in action. Let the weak react to me..." - Kamahl, Pit Fighter from Magic: the Gathering
"That is a mistake many of my enemies make. They think before they act. I act before I think!" - Vortigern from Merlin ('98)
"I AM REBORN!" - Dark Schneider Bastard!! OAV
User avatar
OmniStrata
 
Joined: 01 Aug 2001
Location: Chicago
Status: Wealthy

Postby Legend Killer » Mon Oct 28, 2002 9:31 pm

There is also a very good, easy to use Anti Klez program here

Only 50k download.[/url]
Legend Killer
 
Joined: 28 Aug 2002

Postby Dannywilson » Tue Oct 29, 2002 3:51 am

Ok. Just a little explanation of how the klez virus works. It enters the affected persons comp, (By their own stupidity mind you. Ie opening attachments without scanning them and whatnot) it then searches their computer for email addresses in the outlook history and addy book, it then looks for them in the Explorer history and temp files directory. It takes random person A's addy, and sends a message with a copy of itself to random person B. meanwhile the original infected computer C has no idea this is happening. It repeats this process at random intervals with random addresses from the infected computer, or for even more fun, it makes the "From" addresses up using info it gathers, Ie: "Webmaster@yahoo.com", or "Services@animemusicvideos.org". These factors make it a very smart little piece of malicious programming, and very hard to track. It can even fiddle with your virus protection, so if you get a virus scanner after the fact, it can screw with it to make itself invisible to it.
"in the morning when i have wood..i like to walk around my house and bump random shit with it.... " -Random comment on grouphug.us
User avatar
Dannywilson
 
Joined: 31 Jul 2002
Location: In love with Dr. Girlfriend

Postby dokidoki » Tue Oct 29, 2002 2:50 pm

Dannywilson wrote:Just a little explanation of how the klez virus works. It enters the affected persons comp, (By their own stupidity mind you. Ie opening attachments without scanning them and whatnot)

Viruses in recent years use bugs in Microsoft products to auto-execute. You only have to read the email, not click on an attachment.

From http://www.microsoft.com/technet/treevi ... 01-020.ASP :
"Because HTML e-mails are simply web pages, IE can render them and open binary attachments in a way that is appropriate to their MIME types. However, a flaw exists in the type of processing that is specified for certain unusual MIME types. If an attacker created an HTML e-mail containing an executable attachment, then modified the MIME header information to specify that the attachment was one of the unusual MIME types that IE handles incorrectly, IE would launch the attachment automatically when it rendered the e-mail."
(as the page explains, IE is used to render HTML in MS mailreaders)

This particular one is an old bug, but some people use old software.
Image Image Image
"Comedy is a dying breed." -- kisanzi // "Comedy. Serious business." -- dokidoki
Free games! (some left) // "Anybody want a pizza roll?"
User avatar
dokidoki
c0d3 m0nk3y
 
Joined: 19 Dec 2000
Location: doki doki space
Status: BLEEP BLOOP!

Postby Dannywilson » Tue Oct 29, 2002 6:21 pm

There is this little option in Outlook that lets you disable opening of any attachments, if you haven't turned this on DO IT NOW. In addition, there is another option to not show any messages as html, and show them as formatted text, TURN THIS ON. This will rectify those problems.
"in the morning when i have wood..i like to walk around my house and bump random shit with it.... " -Random comment on grouphug.us
User avatar
Dannywilson
 
Joined: 31 Jul 2002
Location: In love with Dr. Girlfriend

PreviousNext

Return to General AMV

Who is online

Users browsing this forum: No registered users and 4 guests