Notices
ScoobyNet General General Subaru Discussion

******* VIRUS ALERT - W32/ProLin@MM ********

Thread Tools
 
Search this Thread
 
Old Dec 2, 2000 | 01:22 PM
  #1  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

W32/ProLin@MM is an Internet worm that spreads via email. McAfee AVERT has given it a risk assessment of MEDIUM TO
HIGH-RISK. The email comes with an attachment named CREATIVE.EXE, which carries the icon of a Shockwave Media Player application. You may receive the email in this format:

Subject = A great Shockwave flash movie
Body = Check out this new flash movie that I downloaded just now ... It's Great Bye
Attachment = creative.exe

If you run CREATIVE.EXE, it finds and alters all .JPG and .ZIP files on your system and forwards a copy of itself to everyone in your email address book. Please do not run the attachment.

(for the person who got stung by a worm virus recently on here)

DV
Reply
Old Dec 2, 2000 | 05:23 PM
  #2  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Unhappy

....i know what you mean about the worm virus - having got hit by one last week.

Got my virus checker back up to date - and new version upgrade - plus put a firewall in. Firewall has already picked up people trying to access my PC (and blocked them out).

There's some sad people out there...
Reply
Old Dec 2, 2000 | 05:26 PM
  #3  
DavidG's Avatar
DavidG
Scooby Regular
 
Joined: Apr 1999
Posts: 470
Likes: 0
Question

how do you put a firewall in?
Reply
Old Dec 2, 2000 | 05:38 PM
  #4  
logiclee's Avatar
logiclee
Scooby Regular
 
Joined: Sep 2000
Posts: 4,935
Likes: 0
From: Notts, UK
Angry

Too Late

Just spent 36 hours trying to back up what files I could and writing down any info etc.
McAfee found it while scanning but it was too late.
Could open internet explorer but could not change frome homepage without a IE caused fault in bla bla bla. Also could not use windows explorer or my computer to get at my hard drives.
Just reinstalled after formating Harddrive, was getting ready for a clearout anyway.

Lee
Reply
Old Dec 2, 2000 | 05:47 PM
  #5  
Blow Dog's Avatar
Blow Dog
Scooby Regular
 
Joined: May 1999
Posts: 3,855
Likes: 0
From: London
Post

I dont want to be the one to put salt in the wound, but why oh why do people insist on double clicking on any EXE file that some 'stranger' has sent to you.

If it is an executable or any self extracting archive, BIN IT.

Cem

Reply
Old Dec 2, 2000 | 06:30 PM
  #6  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

Make sure you haven't got the layout option in outlook express that auto-opens any emails in a preview pane - its bad news.

DV
Reply
Old Dec 2, 2000 | 06:34 PM
  #7  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Talking

DavidG
Reply
Old Dec 2, 2000 | 06:44 PM
  #8  
Blow Dog's Avatar
Blow Dog
Scooby Regular
 
Joined: May 1999
Posts: 3,855
Likes: 0
From: London
Post

THE BAST4RD!

...
Reply
Old Dec 2, 2000 | 06:46 PM
  #9  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Wink

.....oh no, they killed my PC.....

[This message has been edited by Dave T-S (edited 02 December 2000).]
Reply
Old Dec 2, 2000 | 07:07 PM
  #10  
ChrisB's Avatar
ChrisB
Moderator
 
Joined: Dec 1998
Posts: 23,573
Likes: 0
From: Staffs
Post

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:<HR>Originally posted by Blow Dog:
<B>I dont want to be the one to put salt in the wound, but why oh why do people insist on double clicking on any EXE file that some 'stranger' has sent to you.

If it is an executable or any self extracting archive, BIN IT.

Cem

[/quote]

Hell, if I get an attachment even from somebody I know that I haven't asked for, I delete it any way.

Chris.
Reply
Old Dec 2, 2000 | 07:16 PM
  #11  
whizzer's Avatar
whizzer
Scooby Regular
 
Joined: Oct 1999
Posts: 83
Likes: 0
Post

Just a warning to new users of firewalls , don't think you're 100% safe , I've been using a firewall for some time now and even use a special app to port scan my own computer to see any possible back doors . Anyway somehow a trojan found it's way on my hard drive and bypassed the firewall and I lost 2.4megs of hard drive to a hacker , even with a updated Norton antivirus list . So don't become too complacent .
Reply
Old Dec 2, 2000 | 07:17 PM
  #12  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

Hell if I get an attachment, even from somebody I know, I bin it, go around to their house kick their tv set over and slap them - just to be on the safe side.
Reply
Old Dec 2, 2000 | 07:19 PM
  #13  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Smile

ChrisB
So do I - now!! In any case the firewall intercepts them.

DavidG
BTW - the firewall has already intercepted one attempt to get access to our PC - and denied it.
Reply
Old Dec 2, 2000 | 07:21 PM
  #14  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

Don't talk to me about firewalls.

They take a fortune in petrol to maintain, and I'm taking McAfee to court over the unmoveable scorch marks on my ceiling, not to mention the lingering smell that I can't shift.

DazV
Reply
Old Dec 2, 2000 | 07:22 PM
  #15  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Post

DazV
You have mail.....

Whizzer
Agree - while the PC is plugged in the phone line you are never 100% safe.
Reply
Old Dec 2, 2000 | 07:23 PM
  #16  
Blow Dog's Avatar
Blow Dog
Scooby Regular
 
Joined: May 1999
Posts: 3,855
Likes: 0
From: London
Smile

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:<HR>Hell if I get an attachment, even from somebody I know, I bin it, go around to their house kick their tv set over and slap them - just to be on the safe side.<HR></BLOCKQUOTE>

LOLLOL
Reply
Old Dec 2, 2000 | 07:24 PM
  #17  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Wink

DazV
That was the chicken phal you had last night M8.....
Reply
Old Dec 2, 2000 | 07:31 PM
  #18  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

The TCP/IP stack from implementation was built for 2 way communication.

Anything built on top to vet incoming requestes (eg. firewall) can be pretty much disabled once you suss how it works.

Nothing is safe.

Hell, this message may even be typed by some deranged lunatic. (I can feel Dave's fingers twitching to answer this very paragraph)

DazV
Reply
Old Dec 2, 2000 | 07:37 PM
  #19  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

Dave, don't talk to me about chicken phal's

Now thats what I CALL unauthorised access to my backdoor(!) I'm still trying to close it.
DazV
Reply
Old Dec 2, 2000 | 07:52 PM
  #20  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Wink

DazV
.....putting the roll of toilet paper in the freezer beforehand usually helps.....
Reply
Old Dec 2, 2000 | 08:46 PM
  #21  
logiclee's Avatar
logiclee
Scooby Regular
 
Joined: Sep 2000
Posts: 4,935
Likes: 0
From: Notts, UK
Cool

Cem,

Can't recall opening any exe files or attachements as I don't open such files. I haven't a clue where it came from.

Lee
Reply
Old Dec 2, 2000 | 09:12 PM
  #22  
Blow Dog's Avatar
Blow Dog
Scooby Regular
 
Joined: May 1999
Posts: 3,855
Likes: 0
From: London
Post

This is class material...wasted in the General Questions forum.

Reply
Old Dec 2, 2000 | 09:24 PM
  #23  
DazV's Avatar
DazV
Thread Starter
Scooby Regular
 
Joined: Jun 2000
Posts: 3,783
Likes: 0
Post

Dave, toilet paper in the freezer is good idea.

Personally I use WAX WIZARD - everyone on here raves about it. You be amazed at just how flexible it is.

It offers me a level of protection not surpassed by even frozen toilet paper.

Reply
Old Dec 2, 2000 | 09:42 PM
  #24  
logiclee's Avatar
logiclee
Scooby Regular
 
Joined: Sep 2000
Posts: 4,935
Likes: 0
From: Notts, UK
Cool

Cem

I'll guarantee you'll feel a right muppet if you get it

Lee
Reply
Old Dec 3, 2000 | 07:16 PM
  #25  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Wink

Blowdog
Not sure this one is good enough quality for u yet....
Reply
Old Dec 3, 2000 | 07:35 PM
  #26  
Mr.Cookie's Avatar
Mr.Cookie
Scooby Regular
 
Joined: Apr 2000
Posts: 5,757
Likes: 0
From: www.mrcookie.co.uk
Talking

Tis now Dave im here Christ how did i miss this some funny sh*t in here

Si
Reply
Old Dec 3, 2000 | 08:00 PM
  #27  
Dave T-S's Avatar
Dave T-S
Scooby Regular
 
Joined: Aug 2000
Posts: 8,897
Likes: 4
From: Newmarket Suffolk
Wink

Si
Cos you're too busy intefering in my other posts M8
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
smunns
ScoobyNet General
286
Oct 1, 2015 11:51 AM
smunns
Dealer and Third Party Supplier Queries
5
Sep 14, 2015 08:08 PM
a2jcy
ScoobyNet General
3
May 30, 2001 12:38 PM
Big RS Dave
ScoobyNet General
5
Apr 14, 2001 08:12 PM




All times are GMT +1. The time now is 11:22 PM.