###### VIRUS WARNING #######
03 January 2003, 05:06 PM
#1
Scooby Regular
Thread Starter
Join Date: Jul 2001
Posts: 1,416
Likes: 0
Received 0 Likes
on
0 Posts
I recieved an e-mail today suposedly from Norton Antivirus people....
The attachent it had attached was actually a virus itself!!! Luckly i have Norton AV myself and it was this that caught it! 
Just thought you should all be warned
Klez.H is the most common world-wide spreading worm.It's very dangerous by corrupting your files.Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into your PC
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into your PC
Just thought you should all be warned
03 January 2003, 08:12 PM
#2
Scooby Regular
Thread Starter
Join Date: Jul 2001
Posts: 1,416
Likes: 0
Received 0 Likes
on
0 Posts
gah, someones taking the ****, just got another sent to me...
Spposedly from a company called Plus2, i take it they are another AV software firm??
----------------------------------------------------------------------------------------------
Return-path: <plus@real.com>
Delivery-date: Fri, 03 Jan 2003 19:40:06 +0000
Received: from h243n1fls20o902.telia.com ([213.64.213.243] helo=mailspool.clara.net)
by chaos.uk.clara.net with smtp (Exim 3.36 #1)
id 18UXfk-000JmT-00
for ######@Clara.co.uk; Fri, 03 Jan 2003 19:40:00 +0000
From: Plus 2<plus@real.com>
To: ########@Clara.co.uk
Subject: Check it out
Date: Fri,03 Jan 2003 20:39:59 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type:multipart/mixed;
boundary=#r0xx#
Message-Id: <E18UXfk-000JmT-00@chaos.uk.clara.net>
X-Envelope-To: ######@clara.co.uk
X-claradeliver-Version: 4.17.0
X-UIDL: 1041622806.76434.chaos.uk.clara.net
X-RCPT: #######
Status: U
--------------------------------------------------------------------------------------------------
Hello,
The attached product is send as a part of our official campaign
for the popularity of our product.
You have been chosen to try a free fully functional sample of our
product.If you are satified then you can send it to your friends.
All you have to do is to install the software and register an account
with us using the links provided in the software. Then send this software
to your friends using your account ID and for each person who registers
with us through your account, we will pay you $1.5.Once your account reaches
the limit of $50, your payment will be send to your registration address by
check or draft.
Please note that the registration process is completely free which means
by participating in this program you will only gain without loosing anything.
Best Regards,
Admin,
The attached product is send as a part of our official campaign
for the popularity of our product.
You have been chosen to try a free fully functional sample of our
product.If you are satified then you can send it to your friends.
All you have to do is to install the software and register an account
with us using the links provided in the software. Then send this software
to your friends using your account ID and for each person who registers
with us through your account, we will pay you $1.5.Once your account reaches
the limit of $50, your payment will be send to your registration address by
check or draft.
Please note that the registration process is completely free which means
by participating in this program you will only gain without loosing anything.
Best Regards,
Admin,
Spposedly from a company called Plus2, i take it they are another AV software firm??
----------------------------------------------------------------------------------------------
Return-path: <plus@real.com>
Delivery-date: Fri, 03 Jan 2003 19:40:06 +0000
Received: from h243n1fls20o902.telia.com ([213.64.213.243] helo=mailspool.clara.net)
by chaos.uk.clara.net with smtp (Exim 3.36 #1)
id 18UXfk-000JmT-00
for ######@Clara.co.uk; Fri, 03 Jan 2003 19:40:00 +0000
From: Plus 2<plus@real.com>
To: ########@Clara.co.uk
Subject: Check it out
Date: Fri,03 Jan 2003 20:39:59 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type:multipart/mixed;
boundary=#r0xx#
Message-Id: <E18UXfk-000JmT-00@chaos.uk.clara.net>
X-Envelope-To: ######@clara.co.uk
X-claradeliver-Version: 4.17.0
X-UIDL: 1041622806.76434.chaos.uk.clara.net
X-RCPT: #######
Status: U
--------------------------------------------------------------------------------------------------
03 January 2003, 09:47 PM
#3
Scooby Regular
Thread Starter
Join Date: Jul 2001
Posts: 1,416
Likes: 0
Received 0 Likes
on
0 Posts
So which clown of a moderator moved this into here??
Is Scoobynet not internet based?? derr.. yup.Yet not everyone who is on the net is into 'Computer Related' stuff, hence why i posted it in General, as *everyone* is potentially open to virus hoax's such as these.... even more so the people who don't come in here and only look in the main forum!
Typical Scoobynet, out of all the forums i've posted this on, only on Scoobynet has it been moved, now why is that??
Is Scoobynet not internet based?? derr.. yup.Yet not everyone who is on the net is into 'Computer Related' stuff, hence why i posted it in General, as *everyone* is potentially open to virus hoax's such as these.... even more so the people who don't come in here and only look in the main forum!
Typical Scoobynet, out of all the forums i've posted this on, only on Scoobynet has it been moved, now why is that??
03 January 2003, 10:20 PM
#4
Scooby Regular
Join Date: Mar 2001
Location: Berkshire
Posts: 5,528
Likes: 0
Received 0 Likes
on
0 Posts
If you was to search Norton, Symantec and Trends virus info web sites for 10 mins like I just have, the only reference to "Plus2" you will find is for the file "Plus2.scr" which could be the attachment containing the W32.Yaha.K@mm virus.
Since this has nothing to do with what you have reported you have received then I would like to think that your virus warning is incorrect and it is not a virus at all, just an informational warning, and so would not warrant a post in General.
I have said it before countless times, if you are going to post as supposed virus warning, then at least have the courtesy to check out its validity first.
Dave
Since this has nothing to do with what you have reported you have received then I would like to think that your virus warning is incorrect and it is not a virus at all, just an informational warning, and so would not warrant a post in General.
I have said it before countless times, if you are going to post as supposed virus warning, then at least have the courtesy to check out its validity first.
Dave
03 January 2003, 10:24 PM
#5
Scooby Regular
Thread Starter
Join Date: Jul 2001
Posts: 1,416
Likes: 0
Received 0 Likes
on
0 Posts
ummm, the only this i can say is that while the e-mail was been downloaded Norton AV 2002 cut in and told me that it can intercepted an attachment that contained a virus.I 'quarantined' it as advised.
Should i contact Norton and tell them the mistake their software has made??
Should i contact Norton and tell them the mistake their software has made??
03 January 2003, 10:32 PM
#7
Scooby Regular
Thread Starter
Join Date: Jul 2001
Posts: 1,416
Likes: 0
Received 0 Likes
on
0 Posts
Just found NAV has a log too....
Date: 03/01/2003, Time: 16:55:12, Administrator on AGENTO
The email attachment FixKlez.com is infected with the W32.Yaha.K@mm virus.
The file was quarantined.
Date: 03/01/2003, Time: 19:53:40, Administrator on AGENTO
The email attachment Plus2.scr is infected with the W32.Yaha.K@mm virus.
The file was quarantined.
Date: 03/01/2003, Time: 16:55:12, Administrator on AGENTO
The email attachment FixKlez.com is infected with the W32.Yaha.K@mm virus.
The file was quarantined.
Date: 03/01/2003, Time: 19:53:40, Administrator on AGENTO
The email attachment Plus2.scr is infected with the W32.Yaha.K@mm virus.
The file was quarantined.
Trending Topics
01 April 2003, 05:04 PM
#8
Scooby Regular
Join Date: Mar 2001
Location: Berkshire
Posts: 5,528
Likes: 0
Received 0 Likes
on
0 Posts
Apologies if i sounded a little rude but it was not meant that way. I just think that you should have looked into it a bit more and put a thread up saying something like
Virus warning - W32.Yaha.K@mm found in Fixklez.com/Plus2.scr attachment
And then given some more info. That way everyone is clear on what it is.
Dave
[Edited by druddle - 1/4/2003 6:05:49 PM]
Virus warning - W32.Yaha.K@mm found in Fixklez.com/Plus2.scr attachment
And then given some more info. That way everyone is clear on what it is.
Dave
[Edited by druddle - 1/4/2003 6:05:49 PM]
Thread
Thread Starter
Forum
Replies
Last Post
charlesr
General Technical
9
28 September 2015 09:16 AM
TylerD529
Lighting and Other Electrical
5
20 September 2015 12:10 PM