Monday, November 21, 2005
Ok... more of the same...
Only NOW... it is a warning against something far worse... Spam is bad enough in itself - but, just like cholesterol, there is GOOD SPAM... and REALLY BAD, MALICIOUS EVIL SPAM! The following was FORWARDED to me actually (by a benevolent soul - worry not)- but I have added my luminous commentary, like... ALL OVER IT! So... enjoy!
"As of November 21, 2005 2:20 PM Pacific Standard Time (PST, GMT -8:00), TrendLabs has declared a Medium Risk Virus Alert to control the spread of WORM_SOBER.AG. TrendLabs has received several infection reports indicating that this malware is spreading in the USA, Belgium, Canada, Brazil, and New Zealand. (Malware that travels more than we do - truly the most annoying kind there is...).
This memory-resident worm (a worm that will remember if you have been a good host - and especially if you were NOT) propagates by attaching a copy of itself to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine. (What's next - it will morph into a car and run you down?). Since it's (you mean "its" - right?) email propagation does not require any user intervention, the user is often unaware that this worm is sending out email messages. (A gregarious worm - how novel. It likes people... not just other worms - eh? It e-mails - therefore It Is! It e-mails therefore It Lives!).
The email it sends out has the following details:
From: {Email address generated by this worm} (wow - it even has its own address book!).
Subject: (any of the following)
. hi,_ive_a_new_mail_address
. Mail delivery failed
. Registration Confirmation
. smtp mail failed
. Spam: Registration Confirmation
. Your Password
. Your IP was logged
. Paris_Hilton_&_Nicole_Richie (somehow we knew these two would be involved - somehow... in some way...!)
. You visit illegal websites (and you don't - right. Let he without sin cast the first stone... or send the first contaminated piece of electronic mail!).
Message body: (any of the following)
hey its me, my old address dont work at time. i dont know why?!
in the last days ive got some mails. i' think thaz your mails but im not sure!
plz read and check ...
cyaaaaaaa
This is an automatically generated Delivery Status Notification.
SMTP_Error []
I'm afraid I wasn't able to deliver your message.
This is a permanent error; I've given up. Sorry it didn't work out.
The full mail-text and header is attached
Account and Password Information are attached!
***** Go to: http://www.{random}.com
***** Email: {random}.com (WOW - now THAT is helpful in narrowing it down!).
Dear Sir/Madam,
we have logged your IP-address on more than 30 illegal Websites.
Important:
Please answer our questions!
The list of questions are attached.
Yours faithfully,
Steven Allison (it would have worked far better had it been Dana Scully e-mailing me... or Fox Mulder for you ladies! Lest you have creepy preferences and would want to receive an e-mail from the weirdo character Lance Henriksen played in 'Millennium'... THAT is up to you...!).
*** Federal Bureau of Investigation -FBI-
*** 935 Pennsylvania Avenue, NW, Room 3220
*** Washington, DC 20535
*** phone: (202) 324-3000 (what - no toll-free number? FBI Cheapskates!).
Account and Password Information are attached!
--- or, as a last ditched resort, they will try sending you... this crap:
The Simple Life:
View Paris Hilton & Nicole Richie video clips , pictures & more ;)
Download is free until Jan, 2006!
Please use our Download manager.
Attachment: (any of the following)
. mailtext.zip
. mail.zip
. reg_pass.zip
. mail.zip
. reg_pass-data.zip
. question_list.zip
. list.zip
. downloadm
. mail_body.zip
The attached .ZIP file contains the copy of this worm
using the following file name:
File-packed_dataInfo.exe
When executed, it displays a fake error message box in order to trick a user into thinking that the file did not properly execute.
This worm searches the process list of the affected system for mrt.exe, the Microsoft Windows Malicious Software Removal Tool process. If found, it terminates the said process thus making the system more vulnerable to malicious attacks.
(Wow - it's a Terminator Worm! What some nerds will think of... sheesh).
TrendLabs will be releasing the following EPS deliverables:
TMCM Outbreak Prevention Policy (Beta) - 187 (Released)
Official Pattern Release - 2.957.00 (ETA: 1.5 hrs)
Damage Cleanup Template - 678 (Being created)
Network Virus Wall - 10232 (Being created)
For more information on WORM_SOBER.AG, you can visit our Web site at:
http://www.trendmicro.com/vinfo/virusencyclo/
default5.asp?VName=WORM_SOBER.AG
You can modify subscription settings for Trend Micro newsletters at:
http://www.trendmicro.com/subscriptions/default.asp"
Fascinating reading material... hmm?
To think that this worm is SOBER - at least!
What kind of damage would it inflict, were it to be found drunk and driving on the cyber highway? I shudder at the thought of THAT... *brrrrrrrrrr*
"As of November 21, 2005 2:20 PM Pacific Standard Time (PST, GMT -8:00), TrendLabs has declared a Medium Risk Virus Alert to control the spread of WORM_SOBER.AG. TrendLabs has received several infection reports indicating that this malware is spreading in the USA, Belgium, Canada, Brazil, and New Zealand. (Malware that travels more than we do - truly the most annoying kind there is...).
This memory-resident worm (a worm that will remember if you have been a good host - and especially if you were NOT) propagates by attaching a copy of itself to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine. (What's next - it will morph into a car and run you down?). Since it's (you mean "its" - right?) email propagation does not require any user intervention, the user is often unaware that this worm is sending out email messages. (A gregarious worm - how novel. It likes people... not just other worms - eh? It e-mails - therefore It Is! It e-mails therefore It Lives!).
The email it sends out has the following details:
From: {Email address generated by this worm} (wow - it even has its own address book!).
Subject: (any of the following)
. hi,_ive_a_new_mail_address
. Mail delivery failed
. Registration Confirmation
. smtp mail failed
. Spam: Registration Confirmation
. Your Password
. Your IP was logged
. Paris_Hilton_&_Nicole_Richie (somehow we knew these two would be involved - somehow... in some way...!)
. You visit illegal websites (and you don't - right. Let he without sin cast the first stone... or send the first contaminated piece of electronic mail!).
Message body: (any of the following)
hey its me, my old address dont work at time. i dont know why?!
in the last days ive got some mails. i' think thaz your mails but im not sure!
plz read and check ...
cyaaaaaaa
This is an automatically generated Delivery Status Notification.
SMTP_Error []
I'm afraid I wasn't able to deliver your message.
This is a permanent error; I've given up. Sorry it didn't work out.
The full mail-text and header is attached
Account and Password Information are attached!
***** Go to: http://www.{random}.com
***** Email: {random}.com (WOW - now THAT is helpful in narrowing it down!).
Dear Sir/Madam,
we have logged your IP-address on more than 30 illegal Websites.
Important:
Please answer our questions!
The list of questions are attached.
Yours faithfully,
Steven Allison (it would have worked far better had it been Dana Scully e-mailing me... or Fox Mulder for you ladies! Lest you have creepy preferences and would want to receive an e-mail from the weirdo character Lance Henriksen played in 'Millennium'... THAT is up to you...!).
*** Federal Bureau of Investigation -FBI-
*** 935 Pennsylvania Avenue, NW, Room 3220
*** Washington, DC 20535
*** phone: (202) 324-3000 (what - no toll-free number? FBI Cheapskates!).
Account and Password Information are attached!
--- or, as a last ditched resort, they will try sending you... this crap:
The Simple Life:
View Paris Hilton & Nicole Richie video clips , pictures & more ;)
Download is free until Jan, 2006!
Please use our Download manager.
Attachment: (any of the following)
. mailtext.zip
. mail.zip
. reg_pass.zip
. mail.zip
. reg_pass-data.zip
. question_list.zip
. list.zip
. downloadm
. mail_body.zip
The attached .ZIP file contains the copy of this worm
using the following file name:
File-packed_dataInfo.exe
When executed, it displays a fake error message box in order to trick a user into thinking that the file did not properly execute.
This worm searches the process list of the affected system for mrt.exe, the Microsoft Windows Malicious Software Removal Tool process. If found, it terminates the said process thus making the system more vulnerable to malicious attacks.
(Wow - it's a Terminator Worm! What some nerds will think of... sheesh).
TrendLabs will be releasing the following EPS deliverables:
TMCM Outbreak Prevention Policy (Beta) - 187 (Released)
Official Pattern Release - 2.957.00 (ETA: 1.5 hrs)
Damage Cleanup Template - 678 (Being created)
Network Virus Wall - 10232 (Being created)
For more information on WORM_SOBER.AG, you can visit our Web site at:
http://www.trendmicro.com/vinfo/virusencyclo/
default5.asp?VName=WORM_SOBER.AG
You can modify subscription settings for Trend Micro newsletters at:
http://www.trendmicro.com/subscriptions/default.asp"
Fascinating reading material... hmm?
To think that this worm is SOBER - at least!
What kind of damage would it inflict, were it to be found drunk and driving on the cyber highway? I shudder at the thought of THAT... *brrrrrrrrrr*
Comments:
<< Home
Luce,
That is a MESS ( Malicious Evil Spam Sucks ) lol hehehe
I couldn't help it. You know how I like acronyms.
Your luminous commentary throughout the post is funny. :D
I haven't traveled out of the USA let alone all those other places! It doesn't even need a passport! Nor does it have to save up money for a plane ticket and lodging etc..lol
LOL Yeah that would have been cool had Dana Scully sent it to you! Or Fox Mulder sent it to me. ;)
This made me laugh so hard when I read it. I really laughed outloud. :D
"To think that this worm is SOBER - at least!
What kind of damage would it inflict, were it to be found drunk and driving on the cyber highway? I shudder at the thought of THAT... *brrrrrrrrrr*"
ROFLOL
The worm reminds me of the big fat green worm in "A Bug's Life". At least I think that is the name of the movie. It is an animated movie.
I could see that worm drinking too much and driving a computer chip down the information highway. I can see him swerving all over the place and maybe crashing into another cyber driver and causing a system failure. ROFLOL
I think I have a werid imagination. lol
Of course that isn't so funny if it really happens to a PC, as far as a virus worm causing major problems! *bitting nails*
This was a good post. It is funny the way you poke fun at what they say. :D
God Bless You (\ô/) Luce!
((HUGE HUGS))
Countess
That is a MESS ( Malicious Evil Spam Sucks ) lol hehehe
I couldn't help it. You know how I like acronyms.
Your luminous commentary throughout the post is funny. :D
I haven't traveled out of the USA let alone all those other places! It doesn't even need a passport! Nor does it have to save up money for a plane ticket and lodging etc..lol
LOL Yeah that would have been cool had Dana Scully sent it to you! Or Fox Mulder sent it to me. ;)
This made me laugh so hard when I read it. I really laughed outloud. :D
"To think that this worm is SOBER - at least!
What kind of damage would it inflict, were it to be found drunk and driving on the cyber highway? I shudder at the thought of THAT... *brrrrrrrrrr*"
ROFLOL
The worm reminds me of the big fat green worm in "A Bug's Life". At least I think that is the name of the movie. It is an animated movie.
I could see that worm drinking too much and driving a computer chip down the information highway. I can see him swerving all over the place and maybe crashing into another cyber driver and causing a system failure. ROFLOL
I think I have a werid imagination. lol
Of course that isn't so funny if it really happens to a PC, as far as a virus worm causing major problems! *bitting nails*
This was a good post. It is funny the way you poke fun at what they say. :D
God Bless You (\ô/) Luce!
((HUGE HUGS))
Countess
M.E.S.S. - good acronym, yes!
When I got this e-mail forwarded to me about a SOBER worm doing some damage and wreaking havoc on the information highway... I knew I had to be sarcastic two days in a row... on The Luminous Blog!
Plus - this form of humore is a great anti-depressant for its author, so...!
Blessings!
Post a Comment
When I got this e-mail forwarded to me about a SOBER worm doing some damage and wreaking havoc on the information highway... I knew I had to be sarcastic two days in a row... on The Luminous Blog!
Plus - this form of humore is a great anti-depressant for its author, so...!
Blessings!
<< Home
