New Virus Just Showed Up In My Email

[Bill in SD, CA]

Butt-heads!!

Even as I was submitting a news strory on the virus it showed up.

At least I didn't open it.





Bill

You think that's bad? One the spammers forged my primary TechIMO email address (and several of my friends in the online industry) to send part of the original bulk messages that started this nightmare.

Robert Richmond

[Dbest]

Now what are the odds of that happening glad to hear you didn't open it .

[The Punisher]

i think the odds are quite common, the virus has been appearing lately

[Beemer]

So. Should I open these up to see what I have?....lol



It's tough being popular. This is the second batch today.

Cheers!

[twiztidtruckie]

Knock on wood,

But so far my machines have survived any attemts. I think

Good luck to everyone, and if any information arises about this attack, feel free to inform me by PM, not EMAIL please!

Truckie

I did not quarantine it for further analysis, but it looked like one of the variants sent to my mailbox today had been packed with a complex executable compression algorithm in hopes of slipping past anti-virus software.

Robert Richmond

[Bill in SD, CA]

I had another variant show up with the "Please Respond" title.



Not to change the subject but I was looking for some animated gifs and on one site I clicked to see the category and a download box popped and the title was "virus download in progress."

Clicked cancel and the box popped up immediately in another part of the screen.

Hit cancel again and same thing.

Pulled the plug on my system immediately as I could not keep up with the random boxes.

Scanned for viruses afterwards and thankfully nothing installed.

This was from results of a google search for animated gifs.

Geez!!!

Bill

[NeoStarO1]

Originally posted by RobRich
I did not quarantine it for further analysis, but it looked like one of the variants sent to my mailbox today had been packed with a complex executable compression algorithm in hopes of slipping past anti-virus software.

Robert Richmond

I think you are very well correct on this. I found some last night that were not included in the pathways of the remove directions. I ended up formating last night and just now got finished tightening things up much tighter now. Im locked down pretty damm good now. No more. Got 3 coming in just about 3 minutes ago and NIS caught it right away and did an immediate delete.

Its a nasty one, I think we will be dealing with this quite abit till the 12th unless the new variants have changed that silent date which is all very well possible.

At least one variant has introduced a backdoor exploit, thus the code can be directed to initiate a denial of service operation well beyond the initial SCO/MS attacks slated for early Feb.

It also appears the group responsible for this virus is rolling out updates each time a new feature is added, thus the attack dates can be altered with ease. This is a different approach than the usual release and wait strategy employed by most malicious hackers.

Robert Richmond