New Virus attack ?

[THE_Editor]

I've crossed posted this from Amigaworld.net ( I am the author)




For the second time this morning I'm receiving what I suspect is an infected email.

The first one came in about an hour ago and took approximately half hour to download !! ( on broadband). I got fed up waiting for it to finish and went to Lidl's to get the chrimbo beer & spirits.

On return I found Norton had this displayed ...

This message has been processed by BTopenworld Email Protection Service powered by Brightmail(TM) Anti-Virus using
Symantec's Norton AntiVirus Technology.

CP_2OOAF3.exe was not scanned for viruses by BTopenworld Email Protection Service powered by Symantec because it is too large.


For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .

Wow.. Has someone sussed out how to get past Norton ?? First time I've seen BT's Norton Protection displaying a "Can't check because too large. The file size is 28.7mb !!


Trouble afoot ? ??

Mail was sent from .. pookatimes@hotmail.com


Bloody poxy hotmail AGAIN !! Amazing ... As I have absolutely nothing to do with that poxy service.

I tried to submit item to Symantec but it bombed saying the filesize was too large !! (Great)


_________________
The Outcast Aussie

[KeiFront]

Seems to be a mass-mailing worm.

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.kindal@mm.html

http://vil.nai.com/vil/content/v_100207.htm

[THE_Editor]

ah ... At least Symantec is wise to it !

Many thanks for link.

[TransformX]

28.7MB VIRUS !?

Calling it a virus is like saying that a man who was killed by a tiger, died of a terrible disease...

[Brian Ellis]

That attachment was not sent from any hotmail address. Hotmail limits attachment sizes, as do most ISPs. (mine has an 8 Mb limit). It is therefore a pretty useless piece of junk. The actual worm is much smaller, so it must be padded to make a file that size. It's also not very new. If you read the screed, as for most Outlook-based worms, the From address is taken at random from the Windows Address Book. Why anyone uses Outlook or Outlook Express is beyond my comprehension.

Probably some 12 yr-old kid zipping the actual worm with other files, making an executable, thinking he will destroy the Internet.

[THE_Editor]

If you have any suggestions to a replacement mail client for windows .... I'm all ears ( or eyes, as the case may be).

I'm ok on my AmigaONE as its running debian (PPC) but my wifes machine is a WinTel, and yes, she uses OE as like many females, thats what she's used to.

[Technoid]

Originally posted by Brian Ellis
That attachment was not sent from any hotmail address. Hotmail limits attachment sizes, as do most ISPs. (mine has an 8 Mb limit). It is therefore a pretty useless piece of junk. The actual worm is much smaller, so it must be padded to make a file that size. It's also not very new. If you read the screed, as for most Outlook-based worms, the From address is taken at random from the Windows Address Book. Why anyone uses Outlook or Outlook Express is beyond my comprehension.

Probably some 12 yr-old kid zipping the actual worm with other files, making an executable, thinking he will destroy the Internet.

ROFL

[Technoid]

Originally posted by THE_Editor
If you have any suggestions to a replacement mail client for windows .... I'm all ears ( or eyes, as the case may be).

I'm ok on my AmigaONE as its running debian (PPC) but my wifes machine is a WinTel, and yes, she uses OE as like many females, thats what she's used to.

Mozilla Thunderbird

The inbuilt spamfiltering is great

[Brian Ellis]

I personally use Mozilla/Netscape, but I've heard a lot about Pegasus, although I haven't tried it yet (plan to have a look-see). IMHO, the one to avoid is Eudora; I gave it a soak test lasting a few months earlier this year. I found it cumbersome, slow (especially on filtering) and lacking a number of useful features.

The only e-mail-sorting proggy that I find worthwhile is POPFile. It's free and I'm getting 99.35% accuracy on sorting into 7 mailboxes, of which one is for spam that achieves >99.9% accuracy, false positives and false negatives confounded. It really is fantastic at http://popfile.sourceforge.net/ - however, don't expect immediate results as it trains on errors. Most users find that it needs ~1,000 e-mails before it becomes really top-notch.

[THE_Editor]

kewl