Is this a virus?

eirebhoy · 01-03-2004 06:04PM #1

I got an e-mail from acarey@revenue.ie with the following header:

X-Message-Info: 6sSXyD95QpU1KseSHIAiIAhNMYNMQ3qP
Received: from hotmail.com ([213.79.32.26]) by mc9-f15.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
Mon, 1 Mar 2004 09:20:22 -0800
From: acarey@revenue.ie
To: [email][/email]

@hotmail.com
Subject: Re: Here is the document
Date: Mon, 1 Mar 2004 17:22:08 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0010_0000491F.00004CE4"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: acarey@revenue.ie
Message-ID: <MC9-F15lr7pTK4GXSNM000c47b5@mc9-f15.hotmail.com>
X-OriginalArrivalTime: 01 Mar 2004 17:20:22.0363 (UTC) FILETIME=[7A5BB2B0:01C3FFB1]

It just says here is the file. and contains an attachment. I have never been on revenue.ie before.

eirebhoy · 01-03-2004 06:07PM

I just checked the mail on hotmail.com and it said this:

Hotmail has permanently blocked the following potentially unsafe attachment(s): document_full.pif (23 KB) More Info...

How could someone use revenue.ie's e-mail thingy if it actually is a virus?

zAbbo · 01-03-2004 06:10PM

They could use email spoofing

dont use hotmail, its spam city.

Check out any file extensions before viewing the attachement. .pif is bad

GuanYin · 01-03-2004 06:12PM

Its Netsky, when it infects, it searches windows machines for all files that potentially contain e-mail addresses.

It then starts spoofing the e-mail addresses in order to send the file on from person A to person B. So it looks like person A is sending person B the file when in fact it is all coming from your PC.

BuffyBot · 01-03-2004 06:18PM

It might be nice to remove the other persons e-mail address even if it hasn't come from them

Raphael · 01-03-2004 07:05PM

Yes its a virus

The only way to combat it is to find a folder called "windows" or "winnt" and delete it immediatly

This is not a real folder, it is merely a trick used by the virus

If you dont delete this folder within 72 hours of receiving the virus, your entire system will be in danger

the raven · 01-03-2004 07:09PM

don't be an ass raph
no-ones that stupid

Catsmokinpot · 01-03-2004 07:10PM

Originally posted by Raphael
Yes its a virus

The only way to combat it is to find a folder called "windows" or "winnt" and delete it immediatly

This is not a real folder, it is merely a trick used by the virus

If you dont delete this folder within 72 hours of receiving the virus, your entire system will be in danger

ROFL:D

Hobbes · 01-03-2004 07:22PM

Yea SkyNetB. There is a C out too I think.

I've been getting them all day, which makes me wonder why I am getting them. The address gets 0 spam, and is pretty private and all the random email addresses being generated, none of them look valid or remotely like someone I know.

Jim · 01-03-2004 07:25PM

Originally posted by eirebhoy
How could someone use revenue.ie's e-mail thingy if it actually is a virus?

Theres a virus goin' around atm from security@microsoft.com.

Says "important patch, please install now". Simple but clever

MrPinK · 01-03-2004 07:27PM

Originally posted by eirebhoy
How could someone use revenue.ie's e-mail thingy if it actually is a virus?

Anyone can manually connect to a mail server and create a new mail that says it's from any address. There is no authentication with email at all unless you are using digital signatures.

Is this a virus?

Comments