hosted by liquidweb


Go Back   Web Hosting Talk : Other Forums : Web Hosting Lounge : Sir.Cam Virus
Reply

Web Hosting Lounge Forum for general conversation, share interests, have a laugh or discuss topics not related to the above or below forums.
Forum Jump

Sir.Cam Virus

Reply Post New Thread In Web Hosting Lounge Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 07-26-2001, 12:54 PM
MCHost-Marc MCHost-Marc is offline
Web Hosting Master
 
Join Date: May 2001
Posts: 2,129

Sir.Cam Virus


Woohooo, i got it this morning in the email Does anyone recognize this email address? I am guessing its someone that has me in their address book.

Quote:
Return-path: <HEXADWEB@terra.es>
Envelope-to: marc@mchost.com
Delivery-date: Thu, 26 Jul 2001 09:45:24 -0700
Received: from mailhost.teleline.es ([195.235.113.141] helo=tsmtp8.mail.isp)
by atlantis.mchost.com with esmtp (Exim 3.22 #1)
id 15PoGJ-0002D7-00
for marc@mchost.com; Thu, 26 Jul 2001 09:45:23 -0700
Received: from ADSL ([213.98.172.40]) by tsmtp8.mail.isp
(Netscape Messaging Server 4.15 tsmtp8 Jun 21 2001 23:53:48)
with SMTP id GH3AGW00.P7Y for <marc@mchost.com>; Thu, 26 Jul
2001 18:43:44 +0200
From: "Hexad & Beep"<HEXADWEB@terra.es>
To: marc@mchost.com
Subject: prova
date: Thu, 26 Jul 2001 18:50:01 -0500
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----31B6AAA3_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
Message-Id: <E15PoGJ-0002D7-00@atlantis.mchost.com>
Attached Images
File Type: gif virus.gif (25.6 KB, 99 views)

__________________
Marc Wyss - marc@mchost.com
MCHost Inc - Experts in Private Label Reseller Plans
http://www.mchost.com


Last edited by MCHost-Marc; 07-26-2001 at 12:59 PM.
Reply With Quote
Sponsored Links
  #2  
Old 07-26-2001, 02:34 PM
WebSnail.net WebSnail.net is offline
Web Hosting Evangelist
 
Join Date: Jun 2001
Location: North Yorkshre, UK
Posts: 542
*

Hi Marc,

From what I've heard, the virus also scans the temp Internet folder for email addresses in the files there... Same thing happened to me and I fired off an email to inform them about the virus as well as asking why they had my email address when I'd never heard of them..

In a word "Doh!"

Reply With Quote
  #3  
Old 07-26-2001, 05:35 PM
siwatts siwatts is offline
Newbie
 
Join Date: Jul 2001
Location: Rotherham UK
Posts: 8
SirCAM does indeed act in a very advanced fashion.

The email address in the header above is of spanish origin and is most likely the effect of someone who has used either a website that contains your email addy (and the files are still in cache on their system) or a mailing list archive etc.

I've received 16 emails today, all infected with the same virus, of which 15 came from the same source. The header for that particular user was actually quite perplexing, as it originates from a server at leeds.ac.uk and yet is routed through a server in mexico (.mx) very strange! The other one came from an estate agents in Leeds, whom I telephoned and informed.

This particular virus, from what I've learnt from McAfee's virus information library;
http://vil.mcafee.com/dispVirus.asp?virus_k=99141&
gives the impression that although the virus is non destructive, it is still dangerous in the way it operates.

One additional piece of information about it though, is that the Subject line of the email will almost certainly be the filename of the appended file.

Unlike many other viruses though you should be able to hit reply and the reply does go back to the person who you received it from.

Best of luck!

Reply With Quote
Sponsored Links
  #4  
Old 07-27-2001, 12:35 AM
kickster kickster is offline
Web Hosting Guru
 
Join Date: Dec 2000
Posts: 318
I got 3000 emails from vidotron.ca with this virus! Today I got over 500! I am going nuts. I am using my university email and there is no filtering option.

__________________
Review of top hosting companies. List of Budget hosting.
http://www.webhostingvillage.com

Reply With Quote
  #5  
Old 07-27-2001, 12:42 AM
Ericd Ericd is offline
Aspiring Evangelist
 
Join Date: Apr 2001
Location: America
Posts: 375
And even if you report it to abuse@videotron.ca they won't care. A national newspaper here wrote an article about them being the hacker's paradise. They don't mind their users scanning eveyone's ports...why would they mind if they send viruses Sad but true.

__________________
Eric Desroches - eric@american-hosting.net
American Hosting for Quality Shared Web Hosting and Custom Reseller Solutions
http://www.american-hosting.net/

Reply With Quote
  #6  
Old 07-27-2001, 12:48 AM
kickster kickster is offline
Web Hosting Guru
 
Join Date: Dec 2000
Posts: 318
I called them up and they said they have no idea who is in charge of their servers!!!

__________________
Review of top hosting companies. List of Budget hosting.
http://www.webhostingvillage.com

Reply With Quote
  #7  
Old 07-27-2001, 02:02 AM
MCHost-Marc MCHost-Marc is offline
Web Hosting Master
 
Join Date: May 2001
Posts: 2,129
Quote:
Originally posted by Ericd
And even if you report it to abuse@videotron.ca they won't care. A national newspaper here wrote an article about them being the hacker's paradise. They don't mind their users scanning eveyone's ports...why would they mind if they send viruses Sad but true.
Might be a good host for unlimited ( ) bandwidth ...since they don't care

__________________
Marc Wyss - marc@mchost.com
MCHost Inc - Experts in Private Label Reseller Plans
http://www.mchost.com

Reply With Quote
  #8  
Old 07-29-2001, 01:57 AM
ryu ryu is offline
WHT Addict
 
Join Date: Dec 2000
Posts: 119
Quote:
Originally posted by kickster
I called them up and they said they have no idea who is in charge of their servers!!!
LOLOLOL! i think i want an account there!

__________________
Where are we going and why are we in this handbasket?

Reply With Quote
Reply

Related posts from TheWhir.com
Title Type Date Posted
eleven Report for June Sees 927.4 Percent Rise in Virus-Infected Emails Web Hosting News 2012-06-07 15:33:50
InterNetX Launches Server Administration Software Web Hosting News 2011-12-22 22:06:48
eleven Survey Shows German Firms Plan to Invest More in Email Security Web Hosting News 2011-11-23 18:30:24
Belgium Web Host Shuts Down Server After Duqu Virus Detected Web Hosting News 2011-11-04 14:35:30
Email Security Firm eleven Launches New User Interface Web Hosting News 2011-10-06 17:39:13


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?