Gossamer Forum
(Advanced Search)
for
Home : General : Chit Chat :

Is it a virus/hoax?

Apr 30, 2002, 2:20 AM
Andy
Veteran / Moderator (17364 posts)
Andy's avatar
Apr 30, 2002, 2:20 AM
Post #1 of 12
Views: 999
Shortcut
Quote Reply
Is it a virus/hoax?
I'm getting really annoying with this email being sent to me. Its exaclty the same every time! Is this a virus/hoax?

Quote:
RAV AntiVirus for Linux i686 (snapshot-20010530)
Copyright (c) 1996-2001 GeCAD The Software Company. All rights reserved.
Registered version for 11 domain(s).
Running on host: smtpgw.kuittho.edu.my

The file (part0001:width.scr) attached to mail (with subject:.
) sent by kasim@kuittho.edu.my to webmaster@ace-installer.com,
is infected with virus: Win32/Klez.H@mm.
Cannot clean this file.
The file was successfully deleted by RAV AntiVirus.

Scan engine 8.5 for i386.
Last update: Mon Apr 29 13:35:15 2002
Scanning for 66313 malwares (viruses, trojans and worms).

To get a free 60-days evaluation version of RAV AntiVirus v8
(yet fully functional) please visit:

http://www.ravantivirus.com
http://www.gecadsoftware.com

Andy (mod)
andy@ultranerds.co.uk

IMPORTANT: I've now moved to ultranerds.co.uk, and the .com will no longer work!
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package (plugins total "value" $3,325 & rising, for just $350)| GLinks ULTRA Package PRO (plugins total "value" $5,625 & rising, for just $500)
Support Forum | Links SQL Plugins | DMOZ Dumps | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Compare our different Plugin packages *new* Free CSS Templates
Apr 30, 2002, 2:32 AM
sponge
Veteran (1936 posts)
sponge's avatar
Apr 30, 2002, 2:32 AM
Post #2 of 12
Views: 977
Shortcut
Quote Reply
Re: [Andy.] Is it a virus/hoax? In reply to
seems like maybe your host is running all incoming/outgong email through that antivirus software. (or someone is just screwing with spamming you)

--Philip
Links 2.0 moderator
Apr 30, 2002, 2:34 AM
Andy
Veteran / Moderator (17364 posts)
Andy's avatar
Apr 30, 2002, 2:34 AM
Post #3 of 12
Views: 977
Shortcut
Quote Reply
Re: [sponge] Is it a virus/hoax? In reply to
Thats what I was wondering. At the moment, all my emails get redirected via zoneedit.com, so as far as I can tell nothing should be getting sent to my server viua SMTP/POP3 Frown I think it could just be someone hoaxing me :(

Andy (mod)
andy@ultranerds.co.uk

IMPORTANT: I've now moved to ultranerds.co.uk, and the .com will no longer work!
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package (plugins total "value" $3,325 & rising, for just $350)| GLinks ULTRA Package PRO (plugins total "value" $5,625 & rising, for just $500)
Support Forum | Links SQL Plugins | DMOZ Dumps | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Compare our different Plugin packages *new* Free CSS Templates
Apr 30, 2002, 2:40 AM
Wil
Veteran / Moderator (4108 posts)
Apr 30, 2002, 2:40 AM
Post #4 of 12
Views: 972
Shortcut
Quote Reply
Re: [Andy.] Is it a virus/hoax? In reply to
Someone is trying to send you mail through the SMTP host smtpgw.kuittho.edu.my but the attachment he or she is trying to send keeps getting deleted as they have virus scanner installed on the SMTP gateway.

Why don't you just send a message back to the guy, or the network admins at the University and get him chucked off?!

- wil
Apr 30, 2002, 2:42 AM
sponge
Veteran (1936 posts)
sponge's avatar
Apr 30, 2002, 2:42 AM
Post #5 of 12
Views: 974
Shortcut
Quote Reply
Re: [Andy.] Is it a virus/hoax? In reply to
use filters in your mail client to send the email to the trash can ;-)

--Philip
Links 2.0 moderator

Last edited by:

sponge: Apr 30, 2002, 2:44 AM
Apr 30, 2002, 3:37 AM
brewt
Staff (4070 posts)
brewt's avatar
Apr 30, 2002, 3:37 AM
Post #6 of 12
Views: 967
Shortcut
Quote Reply
Re: [Andy.] Is it a virus/hoax? In reply to
It's a worm that's been going around lately. Symantec talks about it on their home page...

Adrian
Apr 30, 2002, 12:25 PM
Ian
Veteran (2577 posts)
Apr 30, 2002, 12:25 PM
Post #7 of 12
Views: 946
Shortcut
Quote Reply
Re: [brewt] Is it a virus/hoax? In reply to
I have been getting 60+ a day for over a week (klez virus).... I've been using the removal prog. that Symantec posted on thier site for this, and it seems to work.... although it has found its way back onto this machine a few times.

99% of the klez attacks I am getting are coming from a *.com.br.
Apr 30, 2002, 12:53 PM
sponge
Veteran (1936 posts)
sponge's avatar
Apr 30, 2002, 12:53 PM
Post #8 of 12
Views: 943
Shortcut
Quote Reply
Re: [sooke] Is it a virus/hoax? In reply to
Have you tried convincing your host to start banning email addresses and/or installing antivirus software?

--Philip
Links 2.0 moderator
Apr 30, 2002, 1:02 PM
Ian
Veteran (2577 posts)
Apr 30, 2002, 1:02 PM
Post #9 of 12
Views: 939
Shortcut
Quote Reply
Re: [sponge] Is it a virus/hoax? In reply to
I contacted them about this, and their response was "delete your mailbox". Well, they are clearly not worried about it.

I wonder how long an attack can go on for? It is using up reasources, bandwidth, whatever....
Apr 30, 2002, 1:42 PM
sponge
Veteran (1936 posts)
sponge's avatar
Apr 30, 2002, 1:42 PM
Post #10 of 12
Views: 934
Shortcut
Quote Reply
Re: [sooke] Is it a virus/hoax? In reply to
sounds like they either don't know what they're doing or yes, they just don't care. deleting your mail box will certainly get rid existing foul email, but it doesn't fix a recurring problem.

--Philip
Links 2.0 moderator
May 1, 2002, 12:13 AM
sponge
Veteran (1936 posts)
sponge's avatar
May 1, 2002, 12:13 AM
Post #11 of 12
Views: 917
Shortcut
Quote Reply
Re: [sponge] Is it a virus/hoax? In reply to
What exactly does the "@mm" in virus names mean?

--Philip
Links 2.0 moderator
May 1, 2002, 12:29 AM
dan
Enthusiast (749 posts)
dan's avatar
May 1, 2002, 12:29 AM
Post #12 of 12
Views: 913
Shortcut
Quote Reply
Re: [sponge] Is it a virus/hoax? In reply to
mm=mass-mailing. For example, aw32.Klez.gen@mm will send itself to all email addresses in the Microsoft Outlook Address Book (among other things it does).



Cheers - Dan Cool

----
Cheers,

Dan
Principal

Virtual Solutions