Forum Home
Press F1
 
Thread ID: 44735 2004-04-28 22:29:00 A 'smart' virus? oggy (1250) Press F1
Post ID Timestamp Content User
232729 2004-04-28 22:29:00 Hi
Received an e-mail the other day from a name I didn't know. Suspicious.(Allegedly from NAME@doc.govt .nz.) I remembered hearing on the news about some virus doing the rounds and using the .govt.nz address. So... further suspicion. On top of that, the subject was 'good to get in touch again'. (typical virus header) "OK" I thought. "Three reasons not to open it. So I didn't. Selected the e-mail and went shift delete so it wouldn't even appear in the trash folder. (I use Mozilla incidentally)
As I did that however, the text of the e-mail message flashed on the screen and it contained our correct christian names. Are there viruses (virii) out there that can pick an e-mail address and then insert the name of the recipient in the actual text of the message?
This really bothers me as perhaps some old friend out there is waiting for me to reply.
oggy (1250)
232730 2004-04-28 22:46:00 Sounds like it was a real e-mail to be.

Oops?
godfather (25)
232731 2004-04-29 09:43:00 If I receive emails that look like that I right-click the file in my email client and check the properties. If it is genuine it will usually have a known senders address.

Personally I don't worry too much as all my email is scanned on download by my AV program, which is something you should do for basic protection anyway.

An alternative is to install Mailwasher which lets you look at the contents before downloading.

Any of these options is better than dumping a message from a long lost friend or a wealthy relation. :D

Cheers

Billy 8-{)
Billy T (70)
232732 2004-04-29 12:14:00 > If I receive emails that look like that I right-click
> the file in my email client and check the properties .
> If it is genuine it will usually have a known
> senders address .

Because of course viruses never come from people you know ?:|

If someone was infected with a particular virus and it's picked up your address out of the address book, chances are the person who's computer is compromised had your name entered as X and Y ZZZZZ or similar .

The virus only has to read one more line and it can make it quite personal .
whiskeytangofoxtrot (438)
232733 2004-04-29 21:53:00 Picky Picky WTF :|

Did you not notice I also mentioned email virus scanning and Mailwasher as backups for added protection?

"Mail Properties" is just the starting point for establishing the bona fides of the sender, there is no point in deleting an email from a friend (or more importantly a business client) just because it has a virus attached . That is what oggy was concerned about, the loss of a potentially valid message through unnecessary deletion .

Mailwasher tells me if it is spoofed i . e . there is no valid message content, then Norton looks after the virus on download .

Wouldn't have thought I'd have to explain these steps out to you .

Cheers

Billy 8-{)
Billy T (70)
232734 2004-04-30 00:26:00 Darn ... I didn't even think of the 'wealthy relative' angle.
I do have my AV set to scan on download but I'm always a bit concerned about the possiblity of a brand new virus getting through before the signatures are updated. Struck this scenario last month when I got 4 or 5 dodgy sounding e-mails at the same time. Checked out the NAI site for new viruses and the particular subject lines weren't mentioned in the descriptions of the newest viruses. Still didn't open them but checked back with NAI a couple of days later and there they were, listed as a new virus. I suppose nothing gives absolute protection.

Inspiration! I'll go to the DOC website and e-mail their webmaster to see what help I can get there to solve this mystery.
oggy (1250)
1