posted 07-19-2001 20:09            

quote:

---

Originally quoted by someone who thought "Lets click here!":

X-Apparently-To: clme3748@yahoo.com Received: from orval.pccon.net (EHLO orval.sprint.ca) (209.5.194.98)
by mta544.mail.yahoo.com with SMTP; 19 Jul 2001 12:56:15 -0700 (PDT)
Received: from ruckstuhl ([149.99.74.181]) by orval.sprint.ca
(InterMail vM.5.01.01.04 201-252-108-20000901) with SMTP
id <20010719200609.LADT25655.orval.sprint.ca@ruckstuhl>
for ; Thu, 19 Jul 2001 16:06:09 -0400
From: "The Ruckstuhls"
To: clme3748@yahoo.com
Subject: 036
date: Thu, 19 Jul 2001 16:06:38 -0700

X-Mailer: Microsoft Outlook Express 5.50.4133.2400

To: clme3748@yahoo.com
Subject: 036

Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: message text

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks

Attachment:
036.DOC.com

---

I would like to thank the ruckstuhls, whoever they are, for deeming me fit to send this lovely file. It really brightened up my day. I hope they can read this when they're computer finally comes back online
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

This one is really a nasty one too. For once it isn't reliant on loopholes in outlook, it actually scans your registry for your email address book and then searches any HTML documents stored on your drive for stored email addresses.

Then there's a 1 in 20 chance your computer will lose all files, and a good chance it will fill up your hard drive with random script garbage.

Never NEVER open an email executable without wearing asbestos gloves, putting it into quarantine, and then shooting yourself in the head, just to be safe.

So to all of you out there: Keep on clicking! And keep on shooting!

posted 07-20-2001 16:41            

quote:

---

Originally quoted by yet another person that didnt' question a double extension:

From: "ahensley"
To: clme3748@yahoo.com
Subject: lindacover
date: Fri, 20 Jul 2001 18:34:06 -0500
X-Mailer: Microsoft Outlook Express

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks

Attached File:
lindacover.doc.pif

---

Thanks to ahensley, and especially to Linda, whoever you are!

posted 07-21-2001 07:59            

This is actually an interesting virus for once. It picks random documents to send to people, and is actually done well.

Why it sends a double extension, I still dont know. This one would be much more effective if it didn't have a double extension and the words were spelled correctly (and grammatically) in the message.

-Chris

posted 07-29-2001 18:14           

Any way to strip out the virus and find out what some poor sap sent me?

Thanx guys.