Computer Chess Club Archives


Search

Terms

Messages

Subject: Re: *Warning* Deliberate virus sending (= Shreddersetting.bmp.bat)

Author: Aaron Tay

Date: 08:47:37 08/28/02

Go up one level in this thread


On August 28, 2002 at 09:29:16, pavel wrote:

>On August 28, 2002 at 08:29:11, Enrique Irazoqui wrote:
>
>>On August 28, 2002 at 07:38:21, pavel wrote:
>>
>>>Chill Russel ;)
>>>It's actually not as bad as one might think, I also got 7-8 viruses.
>>>It's preety easy for the @mmm type viruses to get e-mail addies from "Temporary
>>>Internet Files", and randomly send emails to the list with random infected
>>>files.
>>>If the person only sent Shreddersettings and nothing else
>>
>>That was precisely my case. I got 7 shreddersettings emails and nothing else,
>>all infected.
>>
>>Enrique
>>
>
>I still think it was randomy sent, as I and most others, seems to get more than
>one file, ( I got 3 differant type of file, one was Sherredsetting, one was
>screensaver the other I don't remember).
>
>Your case could easily be a random case.
>
>It's hard for me to believe that someone will go through all that trouble to do
>it intentionally because, with @mmm viruses if he wants to do it intentionally,
>he will need to infect himself first.

Not exactly, you can find virus samples, and send them manually without being
infected first.

Still, I agree it's not likely to be sent on purpose.Espically since viruses
nowdays can choose file names from existing past files. So if the unexpecting
visitor has the file shreddersettings (perhaps he used in once) sitting around,
the virus with the same file name can be sent.

Makes sense from the point of the virus writter since this makes it more likely
to be opened then a random file from it's own list.So the fact that it was a
file name that might trick you into opening it, doesnt necessary mean it was
done on purpose by the sender.

On the other hand, because the file name cannot be predicted in advance by the
virus writter, the accompanying email text is often vague and generic. "Here is
the file you requested" is a classic one

I would say it's a lot more suspicious if the attachment was accompanied by a
long email text that fitted the file name and implied that it was a shredder
setting file sent on purpose. Something like "I have tested thousands of setting
and in my tests i have found a setting that improves shredder by 200 elo points!
I have attached the settings.."

The exception are viruses like Klez that send file attachments with limited
names chosen from a specific list (I think one variant sent antivirus name
files). For those, Klez can select a longer text since the attachment file name
is known in advance and the text can be "worked in" more naturally..


>It's that irritating.

People panic too easily. Many of the virus attachments are so obvious just by
looking at the text accompanying it. As long as you are using one of those safer
email clients that does not execute attachments automatically (outlook express
is one), it only harms you if you run the attachment. I have 3-4 emails
attachments with viruses sitting safely in my pegasus mail folders for years. My
antivirus detected it in the mail folders, but it's totally inert and not
activiated in memory..



>cheers,
>pavs



This page took 0 seconds to execute

Last modified: Thu, 15 Apr 21 08:11:13 -0700

Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.