sending viruses?

[w00t]

i got an e-mail from anand@anandtech.com

in the e-mail it says

Animals

there is an attachment called secret.cpl

its a .cpl file i scan and its a virus

 

[BriGy86]

ummm....... thanks for the info

you should tell a mod about this also

 

[montag451]

don't put your email in your sig.

If you have to put it, then instead of @ use A T, and that will foil bots

 

[olds]

PM a Mod

 

[mechBgon]

Quite likely the FROM address is spoofed. Very, very common behavior with viruses. Example: I email Anand at that address, and then my computer catches Klez or something. If my computer knows your email address too, then my computer can send you Klez-bearing email that appears to come from him. Confsued yet?

 

[TheStu]

especially when you spelled confused wrong... what is confsued??? is that like when a conference sues you?

 

[BriGy86]

Originally posted by: TheStu
especially when you spelled confused wrong... what is confsued??? is that like when a conference sues you?

at least he's trying to help

 

[mechBgon]

Originally posted by: TheStu
especially when you spelled confused wrong... what is confsued??? is that like when a conference sues you?

It was intentional, ask my mIRC pals from days of yore


How come Anand never sends me any viruses, anyway

 

[w00t]

it scanned it and told me it was a virus so automatically i cant dl which i wouldnt want to. i was just wondering like WTF.

 

[mechBgon]

Just curious, what virus did your antivirus software say that it was?

 

[olds]

Originally posted by: mechBgon
Just curious, what virus did your antivirus software say that it was?

WORM_BAGLE.AG ?

 

[w00t]

Originally posted by: mechBgon
Just curious, what virus did your antivirus software say that it was?

Virus Scan Results
File name: Secret.cpl
File size: 34kb
File type: application/octet-stream
Scan result: Virus"W32.Beagle.AC@mm" found.

edit: good it scanned before i dl

 

[mechBgon]

Ahh, yep: http://vil.nai.com/vil/content/v_127423.htm Spoofs the FROM address.

 

[jadinolf]

Originally posted by: w00t

Originally posted by: mechBgon
Just curious, what virus did your antivirus software say that it was?

Virus Scan Results
File name: Secret.cpl
File size: 34kb
File type: application/octet-stream
Scan result: Virus"W32.Beagle.AC@mm" found.

edit: good it scanned before i dl

Gee. Haven't seen that here in almost a year.

 

[Sunner]

I keep getting mails from old addresses that don't exist anymore, and I believe I've gotten quite a few from Bill Gates and other "celebrities".

 

[hopejr]

So, someone who replies to Anand's blogs has a virus.

 

[Sunner]

Originally posted by: hopejr
So, someone who replies to Anand's blogs has a virus.

Someone who for whatever reason has Anand's address probably has a virus, yes.
Could be harvested, someone with Anand in his address book, etc etc.

 

[hopejr]

Usually viruses also search through internet cache too, and some even go as far to search through every single file on the system for email addresses.

 

[S0Y73NTGR33N]

I just fixed a computer at work that had 3,053 Bagle virus files on it. OMG I hate the Bagle virus

-green

 

[Jeff7]

Originally posted by: mechBgon
Quite likely the FROM address is spoofed. Very, very common behavior with viruses. Example: I email Anand at that address, and then my computer catches Klez or something. If my computer knows your email address too, then my computer can send you Klez-bearing email that appears to come from him. Confsued yet?

Agreed.
Back in the days of IE 3.02, I used the Internet Mail program to send fun e-mails to some friends - the From and Reply To addresses were their own. Bugged the hell out of them....
Forged headers are common, and easy to do. E-mail is really not a very good communication system - no standard acknowledgment system, no security, no standard encryption, etc.