Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Good news everyone! The Boards.ie Subscription service is live. See here: https://subscriptions.boards.ie/

Is this a virus?

  • 01-03-2004 07:04PM
    #1
    Closed Accounts Posts: 14,013 ✭✭✭✭


    I got an e-mail from acarey@revenue.ie with the following header:

    X-Message-Info: 6sSXyD95QpU1KseSHIAiIAhNMYNMQ3qP
    Received: from hotmail.com ([213.79.32.26]) by mc9-f15.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
    Mon, 1 Mar 2004 09:20:22 -0800
    From: acarey@revenue.ie
    To: [email][/email]
    @hotmail.com
    Subject: Re: Here is the document
    Date: Mon, 1 Mar 2004 17:22:08 +0000
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=_NextPart_000_0010_0000491F.00004CE4"
    X-Priority: 3
    X-MSMail-Priority: Normal
    Return-Path: acarey@revenue.ie
    Message-ID: <MC9-F15lr7pTK4GXSNM000c47b5@mc9-f15.hotmail.com>
    X-OriginalArrivalTime: 01 Mar 2004 17:20:22.0363 (UTC) FILETIME=[7A5BB2B0:01C3FFB1]

    It just says here is the file. and contains an attachment. I have never been on revenue.ie before.


Comments

  • Closed Accounts Posts: 14,013 ✭✭✭✭eirebhoy


    I just checked the mail on hotmail.com and it said this:

    Hotmail has permanently blocked the following potentially unsafe attachment(s): document_full.pif (23 KB) More Info...

    How could someone use revenue.ie's e-mail thingy if it actually is a virus?


  • Registered Users, Registered Users 2 Posts: 11,985 ✭✭✭✭zAbbo


    They could use email spoofing :)

    dont use hotmail, its spam city.

    Check out any file extensions before viewing the attachement. .pif is bad :)


  • Closed Accounts Posts: 15,552 ✭✭✭✭GuanYin


    Its Netsky, when it infects, it searches windows machines for all files that potentially contain e-mail addresses.

    It then starts spoofing the e-mail addresses in order to send the file on from person A to person B. So it looks like person A is sending person B the file when in fact it is all coming from your PC.


  • Registered Users, Registered Users 2 Posts: 24,924 ✭✭✭✭BuffyBot


    It might be nice to remove the other persons e-mail address even if it hasn't come from them :/


  • Closed Accounts Posts: 8,880 ✭✭✭Raphael


    Yes its a virus

    The only way to combat it is to find a folder called "windows" or "winnt" and delete it immediatly

    This is not a real folder, it is merely a trick used by the virus

    If you dont delete this folder within 72 hours of receiving the virus, your entire system will be in danger


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 329 ✭✭the raven


    don't be an ass raph
    no-ones that stupid


  • Closed Accounts Posts: 1,622 ✭✭✭Catsmokinpot


    Originally posted by Raphael
    Yes its a virus

    The only way to combat it is to find a folder called "windows" or "winnt" and delete it immediatly

    This is not a real folder, it is merely a trick used by the virus

    If you dont delete this folder within 72 hours of receiving the virus, your entire system will be in danger
    ROFL:D


  • Registered Users, Registered Users 2 Posts: 21,264 ✭✭✭✭Hobbes


    Yea SkyNetB. There is a C out too I think.

    I've been getting them all day, which makes me wonder why I am getting them. The address gets 0 spam, and is pretty private and all the random email addresses being generated, none of them look valid or remotely like someone I know.


  • Registered Users, Registered Users 2 Posts: 14,181 ✭✭✭✭Jim


    Originally posted by eirebhoy
    How could someone use revenue.ie's e-mail thingy if it actually is a virus?

    Theres a virus goin' around atm from security@microsoft.com.

    Says "important patch, please install now". Simple but clever :)


  • Closed Accounts Posts: 1,502 ✭✭✭MrPinK


    Originally posted by eirebhoy
    How could someone use revenue.ie's e-mail thingy if it actually is a virus?
    Anyone can manually connect to a mail server and create a new mail that says it's from any address. There is no authentication with email at all unless you are using digital signatures.


  • Advertisement
Advertisement