Page 1 of 2 12 LastLast
Results 1 to 16 of 19

Thread: Netskyb virus...

  1. #1
    cat /dev/null streetster's Avatar
    Join Date
    Jul 2003
    Location
    London
    Posts
    4,138
    Thanks
    119
    Thanked
    100 times in 82 posts
    • streetster's system
      • Motherboard:
      • Asus P7P55D-E
      • CPU:
      • Intel i5 750 2.67 @ 4.0Ghz
      • Memory:
      • 4GB Corsair XMS DDR3
      • Storage:
      • 2x1TB Drives [RAID0]
      • Graphics card(s):
      • 2xSapphire HD 4870 512MB CrossFireX
      • PSU:
      • Corsair HX520W
      • Case:
      • Coolermaster Black Widow
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • DELL U2311
      • Internet:
      • Virgin 50Mb

    Netskyb virus...

    A mail message with subject "fake" has been found containing
    a virus and has been deleted from our systems.

    The message was sent from anotherrubbishrubbishrubbishrubbishrubbishrubbish@hotmail.com to the following:
    mark.jacob@environment-agency.gov.uk


    The Agency's email gateway is blocking the virus and informing staff as these
    emails are intercepted. As such, Agency computer systems should remain
    unaffected. No action is required from Agency staff at this time, therefore
    you do not need to raise a Help Desk call.

    However, if you require more information about this message and you are an
    Agency employee, please contact the CIS Help Desk, otherwise please contact the
    Environment Agency on 0845 9333111.

    Further information on this virus:
    Scenarios/Incoming/Sophos Sweep: A virus has been detected: 'W32/Netsky-B'.
    Scenarios/Incoming/Sophos Sweep: A virus has been detected: 'W32/Netsky-B'.
    Scenarios/Block All Executables: 'Selected'.



    Regards

    System Administrator
    Environment Agency

    er? how would that have happened then, spoof e-mail or what, i dont use outlook - its not even set up, only use the webmail version of hotmail..

    mark

  2. #2
    Goat Boy
    Join Date
    Jul 2003
    Location
    Alexandra Park, London
    Posts
    2,428
    Thanks
    0
    Thanked
    0 times in 0 posts
    One of the problems with email is that it does not authenticate the sender in any way. When an email is sent, the sender can purport to be anyone on the internet, and the receiver assumes they are not lieing.

    That mail is probably from a virus that has infected a machine that has your address in the address book. You can ignore it.
    "All our beliefs are being challenged now, and rightfully so, they're stupid." - Bill Hicks

  3. #3
    cat /dev/null streetster's Avatar
    Join Date
    Jul 2003
    Location
    London
    Posts
    4,138
    Thanks
    119
    Thanked
    100 times in 82 posts
    • streetster's system
      • Motherboard:
      • Asus P7P55D-E
      • CPU:
      • Intel i5 750 2.67 @ 4.0Ghz
      • Memory:
      • 4GB Corsair XMS DDR3
      • Storage:
      • 2x1TB Drives [RAID0]
      • Graphics card(s):
      • 2xSapphire HD 4870 512MB CrossFireX
      • PSU:
      • Corsair HX520W
      • Case:
      • Coolermaster Black Widow
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • DELL U2311
      • Internet:
      • Virgin 50Mb
    That mail is probably from a virus that has infected a machine that has your address in the address book
    hmmmmm, well aslong as its nothing to do with me its ok

  4. #4
    Senior Member SilentDeath's Avatar
    Join Date
    Aug 2003
    Posts
    4,745
    Thanks
    38
    Thanked
    16 times in 11 posts
    or your machine is infected, and it was sent from yours... again the address would be faked, its too much effort for virus writers to bother going through hotmail, and then theyd need your passwords and such... a virus scan of some kind might be good idea for you..

  5. #5
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,158
    Thanks
    732
    Thanked
    1,604 times in 1,043 posts
    I know that address. I'm pretty sure its from a hexus user.

    Either :
    a) They have been infected by a virus, and it has emailed itself to you, or
    b) Its somone else infected, and the virus has spoofed the email address by seeing it on a webpage (most likely here, as like i said, I'm pretty sure its someone from here)
    c) you are already infected. But i doubt it would be mailing it to yourself if this was the case. A scan is always worth while though
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.

  6. #6
    cat /dev/null streetster's Avatar
    Join Date
    Jul 2003
    Location
    London
    Posts
    4,138
    Thanks
    119
    Thanked
    100 times in 82 posts
    • streetster's system
      • Motherboard:
      • Asus P7P55D-E
      • CPU:
      • Intel i5 750 2.67 @ 4.0Ghz
      • Memory:
      • 4GB Corsair XMS DDR3
      • Storage:
      • 2x1TB Drives [RAID0]
      • Graphics card(s):
      • 2xSapphire HD 4870 512MB CrossFireX
      • PSU:
      • Corsair HX520W
      • Case:
      • Coolermaster Black Widow
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • DELL U2311
      • Internet:
      • Virgin 50Mb
    I know that address. I'm pretty sure its from a hexus user
    which, the hotmail address? that would be my e-mail address... or do you mean the agency one?

    mark

  7. #7
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,662
    Thanks
    53
    Thanked
    383 times in 313 posts
    Its a report generated by spoofing - dont worry about it.
    I hate these reports, they do more damage than good (we try to configure our AV scanners to only sent reports internally )
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  8. #8
    Oh no!I've re-dorkalated! Jiff Lemon's Avatar
    Join Date
    Jul 2003
    Location
    Sunny MK
    Posts
    2,504
    Thanks
    80
    Thanked
    44 times in 41 posts
    Indeed.... The other classic scenario is Spoofed email recieved, so Company Passes it back, complete with Virus to (alledged) sender.

    When will these muppets learn? Mail storm in the making when Company A passes it back to Company B, who passes it back to company A...... ah the joy!

  9. #9
    Pink & Fluffy! Elmo's Avatar
    Join Date
    Jul 2003
    Location
    Glarsgow
    Posts
    3,234
    Thanks
    0
    Thanked
    6 times in 6 posts
    somehow the netsky-d virus has slipped past AVG so i'm having to get rid of it now.

  10. #10
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,662
    Thanks
    53
    Thanked
    383 times in 313 posts
    elmo - go write 101864278463287 times:

    "I must not open unsolicited attachments"
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  11. #11
    Pink & Fluffy! Elmo's Avatar
    Join Date
    Jul 2003
    Location
    Glarsgow
    Posts
    3,234
    Thanks
    0
    Thanked
    6 times in 6 posts
    i didnt tbh, i've got 2 virus checkers on my emails and i never open the email attatchments unless i'm expecting them. so that's not how it got in :s

  12. #12
    Senior Member Stubzz's Avatar
    Join Date
    Sep 2003
    Posts
    573
    Thanks
    0
    Thanked
    0 times in 0 posts
    Why do I NEVER get any of these viruses at all??

    It's just not fair

  13. #13
    Sublime HEXUS.net
    Join Date
    Jul 2003
    Location
    The Void.. Floating
    Posts
    11,819
    Thanks
    213
    Thanked
    233 times in 160 posts
    • Stoo's system
      • Motherboard:
      • Mac Pro
      • CPU:
      • 2*Xeon 5450 @ 2.8GHz, 12MB Cache
      • Memory:
      • 32GB 1600MHz FBDIMM
      • Storage:
      • ~ 2.5TB + 4TB external array
      • Graphics card(s):
      • ATI Radeon HD 4870
      • Case:
      • Mac Pro
      • Operating System:
      • OS X 10.7
      • Monitor(s):
      • 24" Samsung 244T Black
      • Internet:
      • Zen Max Pro
    I've been getting quite a few of these emails, usually with a message saying that outlook has blocked access to the attached *.pif file

    Most vexing about the address spoofing though :/
    (\__/)
    (='.'=)
    (")_(")

  14. #14
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,662
    Thanks
    53
    Thanked
    383 times in 313 posts
    Quote Originally Posted by Elmo
    i didnt tbh, i've got 2 virus checkers on my emails and i never open the email attatchments unless i'm expecting them. so that's not how it got in :s

    Ah it must have been the magic virus fairy then

    Some of them can spread via p2p networks, but ALL rely on you running the attachment.

    (note: I'm referring to the Mydoom/Netsky worms here )

    Given that this virus is mutating at least once a day , its quite possible that you recived a copy of it before your AV kit updated.
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  15. #15
    Senior Member
    Join Date
    Jul 2003
    Location
    ZA ✈ UK
    Posts
    622
    Thanks
    0
    Thanked
    0 times in 0 posts
    Screen shot posted by a friend of mine, the result of netsky:




    Myself, I've received 8 of these, the past week. Which is rather amazing, because this is the first time I've received an email virus in the 4, 5 years I've had this email address. There goes my streak. :/

  16. #16
    Member
    Join Date
    Mar 2004
    Posts
    89
    Thanks
    0
    Thanked
    0 times in 0 posts
    I think I may have had this

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Is anti virus software worth it?
    By ives in forum Software
    Replies: 70
    Last Post: 17-08-2005, 06:43 PM
  2. The AOL virus :D
    By Alex in forum General Discussion
    Replies: 2
    Last Post: 07-02-2004, 04:10 AM
  3. email virus warning thingies
    By Elmo in forum General Discussion
    Replies: 8
    Last Post: 27-01-2004, 10:01 PM
  4. Svchostc problems – possible virus
    By Jimmy Little in forum Software
    Replies: 10
    Last Post: 10-12-2003, 10:27 AM
  5. Nachi virus
    By Skii in forum Software
    Replies: 7
    Last Post: 22-10-2003, 10:35 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •