W32.Netsky.B@mm (Community)

W32.Netsky.B@mm // Community

1  |  

ryan

Feb 28, 2004, 3:47pm
Hi,

It has come to my attention that one of the viruses out there (the
W32.Netsky.B at mm virus) has picked up my email address at awnewbie.com
and has sent mail from other people's systems falsely using my address.
I have received a few bounced emails this way.

I have received 7 e-mails infected with this particular virus in my
mailbox, none of those attempts made it through.

If you receive a message from ryan at awnewbie dot com containing a
virus, please understand that it is not from me. Thank you :)

Ryan

imagine

Feb 28, 2004, 7:10pm
Yep, I got an email with that in it too and deleted it. But it didn't come
from you.

Imagine
[View Quote]

the taz

Mar 2, 2004, 11:39pm
I recieved a message with it aswell. I do not give out this address to
people so the only way to really get it is from these newsgroups...

ALERT!!!
This e-mail in its original form contained one or more attached files that
were infected with a virus or worm, or contained another type of security
threat.

The following attachments were infected and have been repaired:
No attachments are in this category.

The following attachments were deleted due to an inability to clean them:
1. your_picture.pif: W32.Netsky.D at mm

The Following attachments were not delivered due to inbound mail policy
violations:
No attachments are in this category.


[View Quote]

andras

Mar 4, 2004, 3:03pm
[View Quote] > Hi,
>
> It has come to my attention that one of the viruses out there (the
> W32.Netsky.B at mm virus) has picked up my email address at awnewbie.com
> and has sent mail from other people's systems falsely using my address.
> I have received a few bounced emails this way.
>
> I have received 7 e-mails infected with this particular virus in my
> mailbox, none of those attempts made it through.
>
> If you receive a message from ryan at awnewbie dot com containing a
> virus, please understand that it is not from me. Thank you :)
>
> Ryan

Anyone in AW has the IP address 68.82.250.15 ? <pcp01466071pcs.lpaxtn01.pa.comcast.net>
It is an infected computer flooding several people with tis virus picking up AW related email addreses from that machine.

--
Andras
"It's MY computer" (tm Steve Gibson)

andras

Mar 4, 2004, 3:19pm
[View Quote]
> Anyone in AW has the IP address 68.82.250.15 ?
> <pcp01466071pcs.lpaxtn01.pa.comcast.net>
> It is an infected computer flooding several people with tis virus
> picking up AW related email addreses from that machine.
>

n/m I found the person :)

--
Andras
"It's MY computer" (tm Steve Gibson)

qrvncasey o

Mar 6, 2004, 11:06am
Actually, you don't have to give out your e-mail address in a newsgroup at
all. It's enough if someone has received an e-mail or other document with
your e-mail address in it and their computer gets infected. Netsky has the
ability to search the hard drive and collect e-mail addresses from e-mail
and other documents.

As always, be careful when receiving e-mails with attachments, especially in
those programs that hide the extension of known file types!

QRVnCasey o

[View Quote]

the taz

Mar 10, 2004, 1:59am
I use a hotmail acct for everything else though, the only thing I use the
email that the worm was sent to was in AW newsgroups...
[View Quote]

andras

Mar 10, 2004, 11:37am
[View Quote] > I use a hotmail acct for everything else though, the only thing I use the
> email that the worm was sent to was in AW newsgroups...

Which only indicates that the infected person reads the newsgroup and the virus can find the newsgroup file on his/her computer.

--
Andras
"It's MY computer" (tm Steve Gibson)

the taz

Mar 11, 2004, 12:55am
yeah thats what I was saying
[View Quote]

1  |  
Awportals.com is a privately held community resource website dedicated to Active Worlds.
Copyright (c) Mark Randall 2006 - 2024. All Rights Reserved.
Awportals.com   ·   ProLibraries Live   ·   Twitter   ·   LinkedIn