THE ACCURATERELOADING.COM AFRICAN HUNTING FORUM

Accuratereloading.com    The Accurate Reloading Forums    THE ACCURATE RELOADING.COM FORUMS  Hop To Forum Categories  Hunting  Hop To Forums  African Big Game Hunting    CUATION:German Language E-mail is a Worm Virus

Moderators: Saeed
Go
New
Find
Notify
Tools
Reply
  
CUATION:German Language E-mail is a Worm Virus
 Login/Join
 
one of us
Picture of MacD37
posted
Eeker Caution!

The German language SPAM E-mails are a worm virus. It was anounced on NBC tonight on the news, do not open them! This worm give the sender a remote control on your PC, without you knowing it till it is too late! Eeker Eeker


....Mac >>>===(x)===> MacD37, ...and DUGABOY1
DRSS Charter member
"If I die today, I've had a life well spent, for I've been to see the Elephant, and smelled the smoke of Africa!"~ME 1982

Hands of Old Elmer Keith

 
Posts: 14634 | Location: TEXAS | Registered: 08 June 2000Reply With Quote
Moderator
Picture of T.Carr
posted Hide Post
Mac,

I received two of them last night. They looked like emails that failed to go through and were sent back.

Had no clue so I deleted them and then emptied my Deleted Folder.

Thanks for the heads up.

Regards,

Terry



Msasi haogopi mwiba [A hunter is not afraid of thorns]
 
Posts: 5338 | Location: A Texan in the Missouri Ozarks | Registered: 02 February 2001Reply With Quote
One of Us
Picture of Aspen Hill Adventures
posted Hide Post
There were 25 of them waiting for me when I got home from work!


~Ann





 
Posts: 19583 | Location: The LOST Nation | Registered: 27 March 2001Reply With Quote
One of Us
Picture of NitroX
posted Hide Post
I followed one up and I found a website where at the bottom it is possible to input a:

a recipient email address; and

a sending address.

I have received some alledgedly sent by some of the reputable members of AR. I do not for one believe the reputable members are responsible but do believe they were targeted emails sent malciously.

I do think someone visited the site and purposely started the spam.

I think once it has your email domain it records it and sends off more rubbish automatically.

I modified my ISP server's email spam protection to stop most of them.
 
Posts: 10138 | Location: Wine Country, Barossa Valley, Australia | Registered: 06 March 2002Reply With Quote
one of us
posted Hide Post
A good spamblocker program would automatically delete anything you don't want to read and I'm glad I went to the trouble of getting the protection. It's saved me major headaches over the past year or two when everybody was getting worms and other crap sent to them.


Lo do they call to me,
They bid me take my place
among them in the Halls of Valhalla,
Where the brave may live forever.
 
Posts: 2034 | Registered: 14 June 2003Reply With Quote
one of us
posted Hide Post
Yup...I just cleared 14 items out of my spam filter for today, and 13 were German crap.

This is getting ridiculous.


"There always seems to be a big market for making the clear, complex."
 
Posts: 1372 | Location: USA | Registered: 18 June 2000Reply With Quote
One of Us
Picture of fusino
posted Hide Post
Hmm, maybe I've just been lucky, but I haven't seen one of these yet. Thanks for the heads-up though! Smiler


--->Happiness is nothing but health and a poor memory<---Albert Schweitzer
--->All I ever wanted was to be somebody; I guess I should have been more specific<---Lily Tomlin
 
Posts: 435 | Registered: 09 February 2005Reply With Quote
one of us
posted Hide Post
I've been getting these for the past three days. Thankfully, none were opened and all deleted.

Thanks for the warning anyway.

Rustam
 
Posts: 173 | Location: Bangalore, India. | Registered: 18 August 2004Reply With Quote
one of us
Picture of Fjold
posted Hide Post
I got one on my pocket PC this morning using my work address. Thankfully I've learned over the year's don't open anything that you don't have to.


Frank



"I don't know what there is about buffalo that frightens me so.....He looks like he hates you personally. He looks like you owe him money."
- Robert Ruark, Horn of the Hunter, 1953

NRA Life, SAF Life, CRPA Life, DRSS lite

 
Posts: 12731 | Location: Kentucky, USA | Registered: 30 December 2002Reply With Quote
Administrator
posted Hide Post
Ladies and Gentlemen,

WE go through this in a regular basis, so I suggest anyone who is connected to the Internet makes sure they have a good virus program - and keep it updated!.

I got to the stage if someone is not in my address book, his emal message is automatically deleted.


www.accuratereloading.com
Instagram : ganyana2000
 
Posts: 68913 | Location: Dubai, UAE | Registered: 08 January 1998Reply With Quote
one of us
posted Hide Post
Been getting them by the ton but they only seem to be an inconvenience not a real problem.


MARK H. YOUNG
MARK'S EXCLUSIVE ADVENTURES
7094 Oakleigh Dr. Las Vegas, NV 89110
Office 702-848-1693
Cell, Whats App, Signal 307-250-1156 PREFERRED
E-mail markttc@msn.com
Website: myexclusiveadventures.com
Skype: markhyhunter
Check us out on https://www.facebook.com/pages...ures/627027353990716
 
Posts: 13052 | Location: LAS VEGAS, NV USA | Registered: 04 August 2002Reply With Quote
one of us
Picture of jbderunz
posted Hide Post
I received more than 50 rotten mails, mimicking known and reputable adresses.

I am using Symantec and Error Guard.

Are YOu aware of better firewalls?


J B de Runz
Be careful when blindly following the masses ... generally the "m" is silent
 
Posts: 1727 | Location: France, Alsace, Saverne | Registered: 24 August 2004Reply With Quote
One of Us
Picture of NitroX
posted Hide Post
I have had a report from one AR member that he is getting a lot of these addressed "from" my domain NitroExpress.com.

These are of course being sent FALSELY and fraudelently.

So if you receive any of these just delete them. I am not doing it, nor can I do anything about it.

It is pretty obvious someone is specifically targetting me and also AR members for the TO and FROM email addresses.

I initially received them purportedly from an outfitter on this board. Of course that was also a false FROM address.


__________________________

John H.

..
NitroExpress.com - the net's double rifle forum
 
Posts: 10138 | Location: Wine Country, Barossa Valley, Australia | Registered: 06 March 2002Reply With Quote
One of Us
posted Hide Post
I myself have also been vicmtimized by the German spam emails the bulk of which are orginating from servers in Australia and Indonesia.

Happy to forward the info on to any admins out there who may wish to verify the source. In the meantime I would reccomend updated spam fiters.
and AV.
 
Posts: 584 | Location: Blue Island, IL | Registered: 05 January 2005Reply With Quote
One of Us
Picture of NitroX
posted Hide Post
If you have evidence that "German" language spam emails are coming from Australia, it is easy to deal with in Australia unlike in the USA (I guess?) and definitely some other countries.

The Australian Parliament passed laws on spam and I believe it is a criminal offence here. Also Australian ISP's are required to take a very harsh line on it and all to my knowledge prohibit it in their terms and conditions.

Just for you info. You should follow it up with the appropriate authorities if that is the case.

I would prefer not continuing this discussion any further in order not to disrupt the AR forums.
 
Posts: 10138 | Location: Wine Country, Barossa Valley, Australia | Registered: 06 March 2002Reply With Quote
One of Us
posted Hide Post
quote:
Originally posted by carmelolisciotto:
I myself have also been vicmtimized by the German spam emails the bulk of which are orginating from servers in Australia and Indonesia.


Hmmmmmm....
 
Posts: 18352 | Location: Salt Lake City, Utah USA | Registered: 20 April 2002Reply With Quote
One of Us
posted Hide Post
It's not necessary for someone to specifically target you. Once some of the worms have access to your system, they propagate by mining all or many of the emails in your address book.
 
Posts: 314 | Location: Alaska | Registered: 27 December 2002Reply With Quote
One of Us
Picture of NitroX
posted Hide Post
DavikAK

In my case my address book is firmly behind a firewall.

These German language SPAMS are not sophisticated. When I received the firt six or so, I followed one up. It led to an German news story page where at the bottom anyone can input an email address as the SENDING TO address. Beside it is another box where any SENDING FROM email address can be input. I think this can be a true email address or fictious.

Where this page is insidious is I believe the site then uses any valid email addresses from the TO and FROM box to send automatic spams to.

I haven't received any for a few days now. However they are still being reported to me as being fraudelently used as the FROM address by an AR member.

It isn't the result of any sophisticated trolling programme picking email addresses off websites. It is direct human input.
 
Posts: 10138 | Location: Wine Country, Barossa Valley, Australia | Registered: 06 March 2002Reply With Quote
one of us
Picture of Bill C
posted Hide Post
These spam emails, which are the result of variations of the "Sober" worm/virus, are hitting everybody. One of the characteristics is they harvest infected machines for email addresses, and randomly use these to masquerade as the sender, which unfortunately is very easy to do with SMTP email. I doubt that "AR members" are the victims of a targeted attack, I'm seeing this widespread across our client base, blocked by the anti-spam programs and services.

We are also seeing an increase in returned undeliverable messages to users who's email address was victimized, which are not blocked by anti-spam programs and services. These can be confusing, as one receives a notification that a message they sent never reached the recipient. In reality, what this probably means is that somebody's system who you know was infected, and is generating spam email using your email address masquerading as the sender. So when a piece of Spam cannot be delivered, you get the bounce-back.

Regards, Bill
 
Posts: 3153 | Location: PA | Registered: 02 August 2002Reply With Quote
One of Us
posted Hide Post
quote:
Originally posted by Bill C:
These spam emails, which are the result of variations of the "Sober" worm/virus, are hitting everybody. One of the characteristics is they harvest infected machines for email addresses, and randomly use these to masquerade as the sender, which unfortunately is very easy to do with SMTP email. I doubt that "AR members" are the victims of a targeted attack, I'm seeing this widespread across our client base, blocked by the anti-spam programs and services.

We are also seeing an increase in returned undeliverable messages to users who's email address was victimized, which are not blocked by anti-spam programs and services. These can be confusing, as one receives a notification that a message they sent never reached the recipient. In reality, what this probably means is that somebody's system who you know was infected, and is generating spam email using your email address masquerading as the sender. So when a piece of Spam cannot be delivered, you get the bounce-back.

Regards, Bill


Bill C,
Good explanation... however the orignators of the Sober worm have been tracked and are being dealt with. The worm originated in Australia and Indonesia. That has been confirmed.
All you need to do is update your AV or spam filter as many have already said and the problem is for the most part contained. This worm is only slightly different from others in the past.
 
Posts: 584 | Location: Blue Island, IL | Registered: 05 January 2005Reply With Quote
One of Us
Picture of Zero Drift
posted Hide Post
If you believe that you have been infected with the Sober virus, McAfee offers a free removal tool.
McAfee Link

This is a common mass mailing worm. One dimwit even posted that the virus is spread by “TROLLS that frequent Hunting Forumsâ€, however, if you have a POP3 Email address, you are susceptible. The bottom line is never open an E-Mail attachment from anyone that you do not know and never open an executable file.
 
Posts: 10780 | Location: Test Tube | Registered: 27 February 2001Reply With Quote
one of us
Picture of Bill C
posted Hide Post
Last thought...We implement several different packages/appliances for spam blocking, but for corporate networks I prefer a service called Postini, which also incorporates multi-layered antivirus protection plus a measure of perimeter security (DoS, directory harvest attacks). I'd encourage anybody with a "business network" to consider such a service, which I can setup, for about $3/mo per mailbox. A resident antivirus solution, and a properly configured firewall, are still required.
 
Posts: 3153 | Location: PA | Registered: 02 August 2002Reply With Quote
One of Us
Picture of NitroX
posted Hide Post
These German language emails may have more than one source. I don't know about a worm but do know where some of them came from.

This web page is a source for them and the ones I have been receiving. You can easily see at the bottom where it is possible to send German language emails to a TO and FROM email address. All you have to do is type them in.

http://globalfire.tv/nj/05de/globalismus/db_walter.htm

This page was from the first German language email spam that I received, and followed up to find out the source.

I have no idea what the page says but can guess some of the words. DON'T try sending any emails using it.
 
Posts: 10138 | Location: Wine Country, Barossa Valley, Australia | Registered: 06 March 2002Reply With Quote
  Powered by Social Strata  
 

Accuratereloading.com    The Accurate Reloading Forums    THE ACCURATE RELOADING.COM FORUMS  Hop To Forum Categories  Hunting  Hop To Forums  African Big Game Hunting    CUATION:German Language E-mail is a Worm Virus

Copyright December 1997-2023 Accuratereloading.com


Visit our on-line store for AR Memorabilia

Since January 8 1998 you are visitor #: