MSN Home  |  My MSN  |  Hotmail
Sign in to Windows Live ID Web Search:   
go to MSNGroups 
Free Forum Hosting
 
Important Announcement Important Announcement
The MSN Groups service will close in February 2009. You can move your group to Multiply, MSN’s partner for online groups. Learn More
A Peaceful Place[email protected] 
  
What's New
  
  �?•�?·´`·.·�? �?/A>  
  Copyrights  
  Disclaimer  
  �?•�?·´`·.·�? �?/A>  
  Messages  
  General  
  Articles - Misc.  
  ADHD,ADD, Autism  
  �?Allergies �?/A>  
  Alternative & +  
  § Arthritis §  
  Depression  
  �?Diet �?/A>  
  �?Exercise �?/A>  
  Eyes  
  Fitness and Exercise  
  �? FM & CF �?/A>  
  Headaches  
  Herbs etc  
  IBS & Other DD's  
  �?•�?·´`·.·�?�?/A>  
  Liver  
  Lung Health  
  MS �?/A>  
  ◄Mycoplasms�?/A>  
  Osteoporosis  
  Pain-Coping  
  Skin Disorders  
  Sleep  
  �?Supplements  
  �?Toxins �?/A>  
  Humor �?/A>  
  Household ☼¿☼  
  Mind-Body-Spirit  
  Pictures  
    
  �?Links �?/A>  
  Snags  
  Sources & Resources  
  ≈☆≈E-Cards ≈☆�?/A>  
  Pesticides Exp  
  �?Organic Living  
  Organic Gardens  
  See the Most Recent Posts  
  
  
  Tools  
 
General : New Virus Worm Warning
Choose another message board
 
     
Reply
 Message 1 of 2 in Discussion 
From: Rene  (Original Message)Sent: 11/23/2005 7:25 PM

It's a very good thing I'd visited another group this am before opening my email.  A member had posted the notice below:  My inbox had no less than 15 of these nasties !

 

 

i my self had open this and yes i can confirm msn is aware of it they have emails to the techs there on this fortunately my virus scanner was in date and was able to detect this type of worm but this is as follows


Dear Trend Micro customer,

As of November 21, 2005 2:20 PM Pacific Standard Time (PST, GMT -8:00),
TrendLabs has declared a Medium Risk Virus Alert to control the spread
of WORM_SOBER.AG. TrendLabs has received several infection reports
indicating that this malware is spreading in the USA, Belgium, Canada,
Brazil, and New Zealand.

This memory-resident worm propagates by attaching a copy of itself to an
email message, which it sends to target recipients using its own Simple
Mail Transfer Protocol (SMTP) engine. Since it's email propagation does
not require any user intervention, the user is often unaware that this
worm is sending out email messages.

The email it sends out has the following details:

From: {Email address generated by this worm}

Subject: (any of the following)
* hi,_ive_a_new_mail_address
* Mail delivery failed
* Registration Confirmation
* smtp mail failed
* Spam: Registration Confirmation
* Your Password
* Your IP was logged
* Paris_Hilton_&_Nicole_Richie
* You visit illegal websites

Message body: (any of the following)
hey its me, my old address dont work at time. i dont know why?! in the
last days ive got some mails. i' think thaz your mails but im not sure!
plz read and check ...
cyaaaaaaa

---

This is an automatically generated Delivery Status Notification.

SMTP_Error []
I'm afraid I wasn't able to deliver your message.
This is a permanent error; I've given up. Sorry it didn't work out. The
full mail-text and header is attached

---

Account and Password Information are attached!
***** Go to:
http://www.{random}.com
***** Email: {random}.com

---

Dear Sir/Madam,

we have logged your IP-address on more than 30 illegal Websites.
Important:
Please answer our questions!
The list of questions are attached.

Yours faithfully,
Steven Allison

*** Federal Bureau of Investigation -FBI-
*** 935 Pennsylvania Avenue, NW, Room 3220
*** Washington, DC 20535
*** phone: (202) 324-3000

---

Account and Password Information are attached! ---

The Simple Life:
View Paris Hilton & Nicole Richie video clips , pictures & more ;)
Download is free until Jan, 2006!
Please use our Download manager.


Attachment: (any of the following)
* mailtext.zip
* mail.zip
* reg_pass.zip
* mail.zip
* reg_pass-data.zip
* question_list.zip
* list.zip
* downloadm
* mail_body.zip


The attached .ZIP file contains the copy of this worm using the
following file name: File-packed_dataInfo.exe

When executed, it displays a fake error message box in order to trick a
user into thinking that the file did not properly execute.

This worm searches the process list of the affected system for mrt.exe,
the Microsoft Windows Malicious Software Removal Tool process. If found,
it terminates the said process thus making the system more vulnerable to
malicious attacks.



First  Previous  2 of 2  Next  Last 
Reply
 Message 2 of 2 in Discussion 
From: ReneSent: 11/25/2005 9:44 PM
This nasty thing would really have nailed me if I'd not read the message above ! Yet again, today there's a whole whack of these horrid little worms in my junk box today.  I was trying to join something at Yahoo when I know I got "nabbed".   I'm pretty sure it hasn't affect our system, but good grief what's wrong with anyone who invents these things.  There are so many vastly more worthwhile things to do with your time!      You can tell  --  they're about 75Kb in size & not necessarily as an attachment ! 
 
Rene M