Forum Home
Press F1
 
Thread ID: 44345 2004-04-16 08:39:00 Worm Sober F Attack Jester (13) Press F1
Post ID Timestamp Content User
229766 2004-04-16 08:39:00 My main Orcon account has received 10 of the following emails from Orcon tonight. I have never had Virus or Spam on this account as only those who know me use it - looks like the honeymoon is over as far as this email addy goes :(

Suspected virus intercepted

We just intercepted a suspected virus to your email address, and instead of delivering the message to you immediately we have stored it in a special 'Intercepted Virus' folder on our system for your protection.

The message details are as follows:

Re: Faulty mail delivery
From: Webmaster@hotmail.com

The message is believed to contain the following virii:
Worm.Sober.F

None of the recipients are in my address book, it's possible my address has been spoofed from someone with the virus - anyoe else been hit hard tonight?

I went to Orcon's webmail interface and checked one of the intercepted mail out, and all have attachments of 57-58k with .pif extensions.

J
:|
Jester (13)
229767 2004-04-16 08:48:00 This is quite normal for these things, yes they do spoof your address. Just delete them and have a bit comfort knowing that a lot of us are getting them as well. gerrypics (323)
229768 2004-04-16 08:58:00 The reason you are receiving these is most likely because someone you know is infected with the NetSky virus or one of the others active at the moment.

These viruses operate by picking two addresses at random out of an address book, setting one as the sender, and one as the recipient.

This is why you are receiving mail bounces from someone you do not know.

The mailer bounce above tells me that the person infected is a paradise user, chances are it's not you.

From this (pressf1.pcworld.co.nz) thread.
whiskeytangofoxtrot (438)
229769 2004-04-16 08:59:00 Welcome to the club, Jester. :-( Susan B (19)
1