Go Back   Novahq.net Forum > Computers > Tech Support

Tech Support Have a problem? Maybe we can help!

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 03-10-2002, 03:25 PM
Steve is offline Steve
Steve's Avatar
Administrator

Join Date: Sep 2001
Location: Angleterre
Posts: 21,200

Post email virus?

anyone else had this email?

from: NIKHIL

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks

attachment: Book1.xls.pif [202 Kb]


i must of had it at least 10 times in the last year. i'm pretty sure its a virus email, but does anyone know what the virus is called? i'd download it and find out but it might do something bad like infect my boot sector
__________________
Reply With Quote
  #2  
Old 03-14-2002, 01:27 AM
Necromancer is offline Necromancer
Registered User

Join Date: Oct 2001
Posts: 62

Send a message via ICQ to Necromancer
I think it's a worm, called Bookworm, but I could be wrong. I've seen that e-mail before twice, too.
__________________


Reply With Quote
  #3  
Old 04-09-2002, 11:43 PM
Muninn is offline Muninn
Muninn's Avatar
Retired from DF

Join Date: Mar 2002
Location: Omaha, NE
Posts: 244

Well i got one from someone on earthlink it was a WORM sircam32, and it said here is the information you requested.
and as the attachment it had a program i made as the attachment but it was really the SIRCAM32 Worm but i did not open it...so...yeah...
Reply With Quote
  #4  
Old 04-14-2002, 07:36 PM
zza1pqx is offline zza1pqx

Join Date: Sep 2001
Posts: 1,629

Send a message via ICQ to zza1pqx Send a message via Yahoo to zza1pqx
I don't know a huge amount about programing but how would a PIF file be able to infect a PC and do anything?
I remember PIF files from the good old days of DOS.
I have no idea why anyone would want to send someone one so I would be like you SB and suspiscious.
However, I just can't think what even a malicious PIF could actually do. Any ideas?
__________________



Reply With Quote
  #5  
Old 04-17-2002, 11:43 PM
Necromancer is offline Necromancer
Registered User

Join Date: Oct 2001
Posts: 62

Send a message via ICQ to Necromancer
The virus itself is not a PIF file. The programmer obviously wanted to make the file look like one, but he made the mistake of putting a second extension onto the file. This is a characteristic trademark of a virus if it's downloadable. Otherwise, the only other files that have double extensions are Internet files. THis would make the virus easier to circulate on the Internet.

For the sake of this lecture, let's make an example out of "Book1.xls.pif". Now, the way a PIF file could infect a PC is such that the PIF contains data that would define a program hidden in the XLS part of the file. This would effectively turn the file into an internal duplicate, or a file within a file. And yes, this is possible. I've done it with C++. It makes a BIG mess of the file, but when you put a PIF into the mess, you get calculated instructions as to how the file operates. So, as the file is being read, it can also be running a background program at the same time designed to fubar your computer. That's why it's easy to identify viruses as a file having double extensions that have no business being on the Internet, such as XLS and PIF.

Moral of the Story: Don't download a file that has double extensions! Especially ones like "filename.jpg.gif"! Any file which has two extensions from picture files, like "filename.jpg.gif", is definitely a virus, unless someone forced a double extension in their file system, which is highly unlikely.

Hope I have been helpful.
__________________


Reply With Quote
  #6  
Old 04-30-2002, 09:53 PM
zza1pqx is offline zza1pqx

Join Date: Sep 2001
Posts: 1,629

Send a message via ICQ to zza1pqx Send a message via Yahoo to zza1pqx
Yes. Of course that is exactly how a PIF file could be used.
Once again it is proven how stoopid I am.
Cheers Nec.
__________________



Reply With Quote
  #7  
Old 05-25-2002, 10:21 PM
Necromancer is offline Necromancer
Registered User

Join Date: Oct 2001
Posts: 62

Send a message via ICQ to Necromancer
No prob. I've had some fun experimenting with virus files with my C++ program, and the things people throw into them can be very strange indeed.
__________________


Reply With Quote
  #8  
Old 06-19-2002, 08:24 AM
cR4zY is offline cR4zY
Registered User

Join Date: Oct 2001
Posts: 169

i got an email:

Sender: Star
Subject: i made something funny (not virus)
Attachment: worms.zip



didnt know the guy
__________________
gs.25mg - aka; cR4zY



Reply With Quote
  #9  
Old 06-19-2002, 08:29 AM
Steve is offline Steve
Steve's Avatar
Administrator

Join Date: Sep 2001
Location: Angleterre
Posts: 21,200

hehe
the fact that he put ( not a virus ) makes it extremely dodgy lol


im stil getting virul emails everyday now. one of the latest viruses that has a large file attached - about 100 - 200k but there is no message or attachment visible. someone or some ppl still have it in their inbox and i just cant believe they have it after months and months. some ppl need to sort their stuff out
__________________
Reply With Quote
  #10  
Old 06-19-2002, 11:56 AM
Scott is offline Scott
Scott's Avatar
AKA. Panther

Join Date: Sep 2001
Location: Minneapolis, MN
Posts: 10,583

I got them stupid things too. that's why I changed my email.
__________________

04' Dodge SRT-4, Mopar Stage 3, 406whp/436wtq
Reply With Quote
  #11  
Old 07-13-2002, 03:51 AM
DevilDog#1 is offline DevilDog#1

Join Date: Jul 2002
Posts: 7,040

Will you people stop d/l porn! hehehehe
__________________








Quote:
If I don't do that doesn't mean I can't - DD#1
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
What email do you use? Erik General Chat 11 12-08-2006 04:04 PM
email spinal Feedback / Novahq.net Support 1 01-02-2004 09:01 AM


All times are GMT -5. The time now is 02:27 PM.




Powered by vBulletin®