Do not open email called, "Check This" VIRUS!
02-12-2001, 12:07 PM
#1
Racer
Thread Starter
Join Date: Oct 2000
Location: NJ
Age: 50
Posts: 299
Likes: 0
Received 0 Likes
on
0 Posts
Do not open email called, "Check This" VIRUS!
Hey Guys...
Just thought I'd warn everyone now. My company just got hit. If you open the attachement, it will go to everyone in your list. Good Luck!
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
Just thought I'd warn everyone now. My company just got hit. If you open the attachement, it will go to everyone in your list. Good Luck!
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
02-12-2001, 12:34 PM
#2
Three Wheelin'
Join Date: Sep 2000
Location: NEW YORK
Posts: 1,943
Likes: 0
Received 0 Likes
on
0 Posts
Dj, thanks for the info, im at work now and will keep an eye out for it.
oh, isnt this O/T? lol
------------------
2001 Nighthawk Black Pearl TL
oh, isnt this O/T? lol
------------------
2001 Nighthawk Black Pearl TL
- Inspire tailights
- Weapon-R hyper intake
- Burlwood shift knob
- Razo carbon fiber pedals
- Inspire fog light switch (no fogs yet)
02-12-2001, 12:37 PM
#3
Racer
Thread Starter
Join Date: Oct 2000
Location: NJ
Age: 50
Posts: 299
Likes: 0
Received 0 Likes
on
0 Posts
Yeah, I thought this would be something "off Topic, but i figured that TL Discussion gets the most hits...Right? I've received about 100 email so far and last reported it has hit worlwide.
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
02-12-2001, 12:41 PM
#4
Three Wheelin'
Join Date: Sep 2000
Location: NEW YORK
Posts: 1,943
Likes: 0
Received 0 Likes
on
0 Posts
You are right. I would have done the same thing.
------------------
2001 Nighthawk Black Pearl TL
------------------
2001 Nighthawk Black Pearl TL
- Inspire tailights
- Weapon-R hyper intake
- Burlwood shift knob
- Razo carbon fiber pedals
- Inspire fog light switch (no fogs yet)
02-12-2001, 12:57 PM
#6
Racer
Thread Starter
Join Date: Oct 2000
Location: NJ
Age: 50
Posts: 299
Likes: 0
Received 0 Likes
on
0 Posts
I don't know the file name...All I know it is a .vbx file...
The subject is called, "Hi" or "Check This"...
Later
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
The subject is called, "Hi" or "Check This"...
Later
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
02-12-2001, 01:22 PM
#7
Guest
Posts: n/a
My company got hit nasty!! Everyone started opening up there mail at the same time in the morning and we got killed. We have had our IT guys working all day on that thing. Ours said "check this" and had a jpeg attached. Ours started up when you tried to open the jpeg. Be carefull!!!
------------------
2000 Acura TL
Silver
fog lights, tints, burlwood shift knob,
sunroof visor, 17in Mille Miglia sports
H&R springs, ingals camber kit, Soundstream 405 amp powering 2
JL Audio 10's and Infinity tweets.
------------------
2000 Acura TL
Silver
fog lights, tints, burlwood shift knob,
sunroof visor, 17in Mille Miglia sports
H&R springs, ingals camber kit, Soundstream 405 amp powering 2
JL Audio 10's and Infinity tweets.
Trending Topics
02-12-2001, 01:26 PM
#8
Pro
Join Date: Aug 2000
Location: Motown
Age: 53
Posts: 741
Likes: 0
Received 0 Likes
on
0 Posts
Here we go .... The virus name is AnnaKournikova. It was discovered on 8/14/2000. Below is the description.
This script was created by a worm generating tool. As such, the particulars of its actions may vary. The most common variant functions as follows.
When run, the script copies itself to the WINDOWS directory as "AnnaKournikova.jpg.vbs". It attempts to mail a separate email message, using MAPI messaging, to all recipients in the Windows Address Book using the following information:
Subject: Here you have, ;o)
Body:
Hi:
Check This!
Attachment: AnnaKournikova.jpg.vbs
It also creates a registry key and key values. The script refers to these values to check if the mailing routine has already taken place:
HKEY_USERS\.DEFAULT\Software\OnTheFly
HKEY_USERS\.DEFAULT\Software\OnTheFly\mailed=(1 for yes)
On January 26th, the script attempts to connect to the web site http://www.dynabyte.nl
This script was created by a worm generating tool. As such, the particulars of its actions may vary. The most common variant functions as follows.
When run, the script copies itself to the WINDOWS directory as "AnnaKournikova.jpg.vbs". It attempts to mail a separate email message, using MAPI messaging, to all recipients in the Windows Address Book using the following information:
Subject: Here you have, ;o)
Body:
Hi:
Check This!
Attachment: AnnaKournikova.jpg.vbs
It also creates a registry key and key values. The script refers to these values to check if the mailing routine has already taken place:
HKEY_USERS\.DEFAULT\Software\OnTheFly
HKEY_USERS\.DEFAULT\Software\OnTheFly\mailed=(1 for yes)
On January 26th, the script attempts to connect to the web site http://www.dynabyte.nl
02-12-2001, 01:44 PM
#9
Daddy
Join Date: May 2000
Location: Stanley, KS
Posts: 726
Likes: 0
Received 0 Likes
on
0 Posts
We also were "slammed" this morning however the subject in our email was "Here you have, ;-)". You would think by now that people were smart enough not to open emails with .vbs attachments.
Get this...the first person that opened the virus in my company was the Director of Technology Support, the help desk manager. I just about fell out of my chair when I saw the emails coming from him!
------------------
'00 Firepepper Red TL
Get this...the first person that opened the virus in my company was the Director of Technology Support, the help desk manager. I just about fell out of my chair when I saw the emails coming from him!
------------------
'00 Firepepper Red TL
02-12-2001, 01:48 PM
#10
Pro
Join Date: Aug 2000
Location: Motown
Age: 53
Posts: 741
Likes: 0
Received 0 Likes
on
0 Posts
The subject say: "Here we have, ;o)
and the body of the email say:
Hi:
Check This!
<FONT COLOR="#800080" SIZE="1" FACE="Verdana, Arial">[This message has been edited by Bigmonkey70 on February 12, 2001 @ ]</font>
and the body of the email say:
Hi:
Check This!
<FONT COLOR="#800080" SIZE="1" FACE="Verdana, Arial">[This message has been edited by Bigmonkey70 on February 12, 2001 @ ]</font>
02-12-2001, 01:49 PM
#11
Racer
Thread Starter
Join Date: Oct 2000
Location: NJ
Age: 50
Posts: 299
Likes: 0
Received 0 Likes
on
0 Posts
What an idiot! If he gets fired, can I have his job? LOL...Mine came from the Marketing Department!
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
------------------
2001 Acura TL Laguna Green Metallic
Stock for now...
Wood Grain kit/Rear Spoiler/Inspire Lights ...More to come very soon!
djalliance@acura-tl.com
02-12-2001, 01:54 PM
#12
Three Wheelin'
Join Date: Aug 2000
Age: 46
Posts: 1,382
Likes: 0
Received 0 Likes
on
0 Posts
Originally posted by TLinKC:
We also were "slammed" this morning however the subject in our email was "Here you have, ;-)". You would think by now that people were smart enough not to open emails with .vbs attachments.
Get this...the first person that opened the virus in my company was the Director of Technology Support, the help desk manager. I just about fell out of my chair when I saw the emails coming from him!
We also were "slammed" this morning however the subject in our email was "Here you have, ;-)". You would think by now that people were smart enough not to open emails with .vbs attachments.
Get this...the first person that opened the virus in my company was the Director of Technology Support, the help desk manager. I just about fell out of my chair when I saw the emails coming from him!
------------------
'00 White Diamond Perl w/Nav
Wings West Spoiler
Comptech Exaust
Rear Comptech Sway bar
AEM CAI
02-12-2001, 02:22 PM
#14
Three Wheelin'
Join Date: Aug 2000
Age: 46
Posts: 1,382
Likes: 0
Received 0 Likes
on
0 Posts
Originally posted by Nate:
<a href="http://areyoudumbenoughtoclick.com/annakournikova.jpg.vbs">annakournikova.jpg.vbs</a>
3|233'][' |-1@><0I2 \v/0o']['
<a href="http://areyoudumbenoughtoclick.com/annakournikova.jpg.vbs">annakournikova.jpg.vbs</a>
3|233'][' |-1@><0I2 \v/0o']['
------------------
'00 White Diamond Perl w/Nav
Wings West Spoiler
Comptech Exaust
Rear Comptech Sway bar
AEM CAI
02-12-2001, 06:18 PM
#16
The Acura Granddaddy
Join Date: Dec 2000
Location: Federal Way, WA
Age: 43
Posts: 629
Likes: 0
Received 0 Likes
on
0 Posts
Ironically ours was spread by both our Exchange Mail Team and Helpdesk. We had to take one user off our network becuase she had sent over 3000 messages. Our email system was backloged by 5 minutes at some times. This is at a major company too w/ 40,000 users. They are saying this one is spreading twice as fast as ILOVEYOU and Melissa.
02-12-2001, 06:36 PM
#17
Three Wheelin'
Join Date: Aug 2000
Age: 46
Posts: 1,382
Likes: 0
Received 0 Likes
on
0 Posts
Originally posted by Nate:
<a href="http://areyoudumbenoughtoclick.com/annakournikova.jpg.vbs">annakournikova.jpg.vbs</a>
3|233'][' |-1@><0I2 \v/0o']['
<a href="http://areyoudumbenoughtoclick.com/annakournikova.jpg.vbs">annakournikova.jpg.vbs</a>
3|233'][' |-1@><0I2 \v/0o']['
I just saw SportsCenter. And it has coverage on this virus on their show. I thought that was funny.
------------------
'00 White Diamond Perl w/Nav
Wings West Spoiler
Comptech Exaust
Rear Comptech Sway bar
AEM CAI
02-12-2001, 09:03 PM
#19
Senior Moderator
Join Date: May 2000
Location: Brooklyn, NY USA
Age: 47
Posts: 17,085
Received 740 Likes
on
309 Posts
Thanks for the headzup everyone! I'm keeping this here and not moving it due to the higher traffic here in GD and importance of this info..
Ed
------------------
Acura-TL.com - Forum Moderator
'99 TL Satin Silver/Ebony, Non/Nav, Comptech lowered, Comptech Air Filter Element, Inspire Tails, AEM Brake Pads all around, Comptech Axle Back Exhaust, "Guy Smiley" doll on the dash as my Co-driver...
Pics of my TL
Pics of my Miata! Wadya think?
Ed
------------------
Acura-TL.com - Forum Moderator
'99 TL Satin Silver/Ebony, Non/Nav, Comptech lowered, Comptech Air Filter Element, Inspire Tails, AEM Brake Pads all around, Comptech Axle Back Exhaust, "Guy Smiley" doll on the dash as my Co-driver...
Pics of my TL
Pics of my Miata! Wadya think?
Thread
Thread Starter
Forum
Replies
Last Post
brandnewcolony
3G TL (2004-2008)
53
09-12-2015 10:39 AM
Mugen TSX
Eastern Canada
0
09-01-2015 11:11 PM
