Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

I received a weird email with an attachment

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
Emillereid Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 04:14 AM
Original message
I received a weird email with an attachment
Edited on Tue Jan-27-04 04:14 AM by Emillereid
In the subject line it said: server report and it was From: bfm@teleregion.co.uk
and had an a zipped attachment. When I clicked on it (I know I shouldn't have) it became a relatively small file labeled doc.scr. My Imac wouldn't open it and I ran my virus program and it didn't find anything. Does anyone know what this kind of file is.Is it someone trying to give me a virus??
Printer Friendly | Permalink |  | Top
Nomad559 Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 04:17 AM
Response to Original message
1. Was It this?
Printer Friendly | Permalink |  | Top
 
Mikimouse Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 04:20 AM
Response to Original message
2. There is a new worm circulating,,,
My Norton picked it up when I downloaded my e-mail.
Printer Friendly | Permalink |  | Top
 
cosmicaug Donating Member (676 posts) Send PM | Profile | Ignore Tue Jan-27-04 04:42 AM
Response to Original message
3. Nobody is trying to send you a virus.
Edited on Tue Jan-27-04 04:43 AM by cosmicaug
Emillereid wrote:
In the subject line it said: server report and it was From: bfm@teleregion.co.uk and had an a zipped attachment. When I clicked on it (I know I shouldn't have) it became a relatively small file labeled doc.scr. My Imac wouldn't open it and I ran my virus program and it didn't find anything. Does anyone know what this kind of file is.Is it someone trying to give me a virus??

These things usually mail themselves. Most likely, nobody is trying to send you a virus.

As to the rest, it probably is some sort of a worm (though there isn't enough information to know which it is --is your anti-virus signature file up to date?) but, since most of these worms are targeted toward the Windows platform you're probably O.K. (of course, this assumes you're not running a PC emulator on your Mac). As to the ".scr" extension, it corresponds to screen-savers in Windows-land. The reason you see this so often is because it is one of several extensions which is considered executable by the operating system (others are ".bat", ".pif", ".com", ".exe" and ".cmd").

On edit: Added a question mark.
Printer Friendly | Permalink |  | Top
 
papau Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 06:45 AM
Response to Reply #3
4. it is a worm - Avast and Trend have fixes out - it messes up email
the click on attachment starts it.

Time to go and be cleaned!

:-(
Printer Friendly | Permalink |  | Top
 
SheilaT Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 07:48 AM
Response to Original message
5. It's a good rule
never to open an attachment if you don't know who it came from. Or if you're not sure that the person it came from was actually planning on sending you something.

Printer Friendly | Permalink |  | Top
 
Robb Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 08:04 AM
Response to Reply #5
6. Very good rule.
Of course, ya do have a certain amount of insulation from the world of crapola in being a Mac user! :thumbsup:
Printer Friendly | Permalink |  | Top
 
MaineDem Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 08:52 AM
Response to Original message
7. I got an email from a campaign last night
Subject line was, simply, Hi
There was no text but an attachment named document.exe

I'm VERY sceptical.
Printer Friendly | Permalink |  | Top
 
TXlib Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:02 AM
Response to Reply #7
8. That's the new virus going around.
Delete it.
Printer Friendly | Permalink |  | Top
 
Rabrrrrrr Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:28 AM
Response to Original message
9. Don't run it!
Others have already given you a good explanation of the danger here, and that you should just delete it and never run a .scr file.

And if you are using Outlook, DUMP IT. It's so full of security holes, and so easily manipulatable, and so poorly designed, you will always have problems.

Get yourself a safe email client like The Bat! (http://www.ritlabs.com). Virus and worm proof, and it won't won't html email unless you tell it to (html email is another great way to give people viruses and other problems; when I'm president, html email will be a felony :-) )

But seriously, if you are using Outloko, or Outlooko express, dump it immediately and go to anything. it's not only poorly put together, but the majority of email-based worms and viruses are designed around Outlook's problems.
Printer Friendly | Permalink |  | Top
 
YellowRubberDuckie Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:40 AM
Response to Original message
10. I got something yesterday...thank goodness I deleted it.
It said it was from Keith something, and it said send to like minded people...I figured it was either a virus or a freeper piece, and I deleted it.
Duckie
Printer Friendly | Permalink |  | Top
 
RedEarth Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:46 AM
Response to Original message
11. This is a new VIRUS going around......do not open any Zip attachment
unless you know who it from and what's in it. Yesterday afternoon Norton did not have any informatiion on this virus, however, McAfee did have some.
Printer Friendly | Permalink |  | Top
 
Tinoire Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 10:24 AM
Response to Original message
12. Go to Symantec and TrendMicro. Run an on-line scan to be sure. n/t
Printer Friendly | Permalink |  | Top
 
Emillereid Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 01:16 PM
Response to Reply #12
14. I went onto to Symantex and ran something called
Security Check. It said I wasn't vulnerable to hackers or trojan horses. Being a Mac user I'm not saavy to much of this. I have a virus program (virus barrier), but I have to confess I don't think about it very often. I updated and ran it last night and again this morning -- and it claims everything is a ok -- picked up a couple of corrupted files that I'd put in the trash.

Is there a mac online security thing at symantec or trendmicro I can run. Do you have a link? Thanks for all the great advice.
Printer Friendly | Permalink |  | Top
 
nini Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 11:01 AM
Response to Original message
13. I NEVER open an email with an attachment from someone I don't know
or not expected. NEVER.

I got the same type thing yesterday and deleted it. We've got great anti-virus stuff here at work, but a new virus has been known to slip through.

Printer Friendly | Permalink |  | Top
 
catmandu57 Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 01:25 PM
Response to Reply #13
15. That's the best thing to do
Edited on Tue Jan-27-04 01:26 PM by freddie57
just delete any attachment from someone you don't know, and confirm any attachments from known people before you open. It's better to be safe than sorry.
Printer Friendly | Permalink |  | Top
 
ConcernedCanuk Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 01:39 PM
Response to Original message
16. NASTY stuff -, hides in Winamp5, RootkitXP, Officecrack and Nuke2004
.
.

"The virus also copies itself to the Kazaa download directory on PCs, on which the file-sharing program is loaded. The virus camouflages itself, using one of seven file names, including Winamp5, RootkitXP, Officecrack and Nuke2004. Variations in the body text include: "The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment."

/snip/

" Mail systems that remove executable files from e-mails can stop the program from spreading. "


Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Fri May 03rd 2024, 11:59 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC