Page 1 of 1

Posted: 27 Apr 2002, 21:27
by BlackHawk*K
hails all,

ive recieved two attemps to implant a virus on my puter threw email. they game in mails and one had a pic of a figurine. i sent them to my hotmail account and it scanned the and reported that they were this : W32/Klez.gen@MM Virus Found


it has an auto pop up asken if you want to open it or save it. i said no luckily. after doing some poking the searches i did on the file names only brought up spanish web pages, so i would GUESS it might originated there? i dunno. just be a look out for mails with one named senders with attachments. hotmail reported no cure for this and after talking to death he mentioned it is a new worm out there.

an IMPORTANT note:

the mail it was sent on was my email for ELH and mech ONLY. i have not used this mail for anything other then my mechy. so it might of been send by someone in ELH or HS. or possibly anyone who got my name as ELH command.

be carefull.

<S>!

Posted: 27 Apr 2002, 21:29
by BlackHawk*K
ok nm, my email is posted on this very board. anyhow it IS mech related or something. i left my hotmail account active to take care of any junk mail or non mechy stuff. (in case i get spammed like usual)

any info on this would be helpfull

ok update:

here is some info on the virus and how to check if you got it and all that jazz. i think you might be able to delete the file or perhaps the regestry entries. or if your not cheap like me, use a virus scanner :razz:

http://vil.mcafee.com/dispVirus.asp?virus_k=99237


_________________
BlackHawk*Kalasa
Eridani Light Horse.

Simplicity. If a plan looks messy on paper or in a computer simulation, it is too complicated to succeed. The best plans often turn out to be ones drawn in the dirt and explained with a few hand gestures.

<font size=-1>[ This Message was edited by: BlackHawk*K on 2002-04-27 21:40 ]</font>

Posted: 28 Apr 2002, 08:42
by Hammer
This is indeed a nasty virus. The best thing you can do is to turn off previews in outlook, and don't open anything that ends in .com, .exe, .bat, or .pif unless you confirm with the sender that it if safe. Virus scan your e-mail, do a google search for "free virus scan" and you will prolly find some free ones. Here is my write up at my flight sim units forum (many got hit) on this virus:

http://pub80.ezboard.com/fcmacgwingsoff ... =345.topic

Posted: 28 Apr 2002, 09:59
by Featherhorse
Turn off previews?!
<gulps>

I had rec'd a couple of "odd" emails w/o attachments. But I was not aware that the preview could activate attachments.
_________________
Fethr

<font size=-1>[ This Message was edited by: Featherhorse on 2002-04-28 10:06 ]</font>

Posted: 28 Apr 2002, 11:18
by BlackHawk*K
the realy odd thing about the two mails i got was it had the uncommon 'Open me' lines. the first one was titled decheros, and the second was 'to class' the senders were single names that were none scence. there was no text content in the mail. and it kept asken me what to do with the attachment and i kept on clicking cancel. finaly i got fed up and sent it to hotmail and they scaned it for me hehe (yea i know im cheap).

Posted: 28 Apr 2002, 20:03
by Hammer
Yes Feather...this one can be activated by previewing it! :sad:

This virus is actually a very clever piece of programming. Too bad this person went this route instead of working on a cool game for us...

Posted: 28 Apr 2002, 20:32
by Featherhorse
I think that my firewall KO'd it. I couldn't find any of the .exe, nor has my anti-virus software beeped. All I got was a "from", and a subject line.

Posted: 02 May 2002, 07:58
by Hammer
Killer Kelli! Hey there! :grin:

Posted: 05 May 2002, 12:29
by BlackHawk*K
actualy killer, i looked for mail from you and i didnt get any. and besides, things happen all the time.