Jump to content

Adverts are hidden for all 'Gold Members' - sign up for just £10 a year by clicking here | Advertise here for just 25p per 1,000 impressions - click here
Welcome to Fans Focus. You are currently viewing as a guest. Please login or register to post.    

Sign in icon Sign In Register Register Help Help Login with Facebook Login with Twitter

League section covering 2,000+ clubs - check out your division and club page click here!

Recent Status Updates
(Update your status via the dropdown
to the right of your name (top left))

View All Updates

Upcoming Calendar Events

There are no forthcoming calendar events

Today's Birthdays ( 20-November 17 )

  • Photo
    Pez_86

    Age: 31

  • Photo
    Real Chris Davis

    Age: 33

  • Photo
    RobbieO

    Age: 38

  • Photo
    SIMMO_BAFC

    Age: 40

  • Photo
    AncientBlue

    Age: 77

  • Photo
    BUTTERBEAN

    Age: 40

  • Photo
    Beanofire

    Age: 50

  • Photo
    Chesney

    Age: 32

  • Photo
    markhayward

    Age: 55


Possible viruses

- - - - -

  • Please log in to reply
regular view basic view
16 replies to this topic

#1
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
If you receive an e-mail from "derek.j.bird"(derek.j.bird@ntlworld.com) with the subject "Home" and an attachment called "Home.doc.pif", I understand the attachment may have a virus in it (whether malign or just a hoax, I don't know). I hope it's a virus because the alternative doesn't bear thinking about.<P>Yet another reason to use an e-mail program that allows you to download messages as text-only , not to use Microsoft Word and not to open any attachments that look a bit dodgy!<P>Also, beware of messages from "Rob Steele", who runs the Beerhound web site, with a .exe attachment. He has told me he got a virus.<P>Phil.

#2
offline MCD

MCD
  • Spectator
    Offline
  • Posts: 362
  • Joined: 6 Sep 2001
Phil,<P>Thanks for that! Is this something recent as I was alerted to this on Saturday. I do use a virus checker and I also visited a site, which was recommended to me by the original advisor, to solve the problem. This I did and was given a clean bill of health.<P>Any comments greatly appreciated.<P>Not sure how I managed to send one to you though as your not in my address book!! images/icons/blush.gif" border="0

#3
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
I have Pegasus set so it opens messages in text-only format in <BR>order to combat viruses and it didn't recognise ".pif" as a file <BR>extension.<P>Opening the file in Wordpad (i.e. as a text-only file), I can see that it<BR>has details of Enfield's defeat against Hitchin Town on 11 September, that<BR>you wrote part of it using Word 8.0 and that the template you used was<BR>Normal.dot but most of it is not easily decipherable. I did however notice<BR>references to inIT (UK) Ltd and Borland Delphi if that helps.

#4
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
What you really need to watch out for is the most destructive evil virus around, namely, Tony Lazarou. I understand that the government is considering spending millions of pounds to erradicate it.

#5
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
It's very likely the message never came from Derek at all. There are scummy spammers out there who harvest e-mail addresses from newsgroup and message board postings and fake their headers using them to evade detection. My force9 account was hit recently (I got undeliverable returns for messages I never sent). Reort it to your ISP if this happens to you. <BR>UNDER NO CIRCUMSTANCES SHOULD YOU OPEN ANY ATTACHMENT YOU ARE NOT SURE ABOUT. IF THE FILE ENDS .pif IT CAN SCREW UP THE REGISTRY

#6
offline MCD

MCD
  • Spectator
    Offline
  • Posts: 362
  • Joined: 6 Sep 2001
<BLOCKQUOTE><font size="1" face="Verdana, Helvetica, sans-serif">quote:</font><HR>Originally posted by <Andy Davison>:<BR><STRONG>It's very likely the message never came from Derek at all. There are scummy spammers out there who harvest e-mail addresses from newsgroup and message board postings and fake their headers using them to evade detection. My force9 account was hit recently (I got undeliverable returns for messages I never sent). Reort it to your ISP if this happens to you. <BR>UNDER NO CIRCUMSTANCES SHOULD YOU OPEN ANY ATTACHMENT YOU ARE NOT SURE ABOUT. IF THE FILE ENDS .pif IT CAN SCREW UP THE REGISTRY</STRONG><HR></BLOCKQUOTE><P>Strangely enough, you may have hit yhe nail on the head!<P>I got an e-mail from Bruce recently saying that I have sent him an infected e-mail but... Bruce IS NOT in my address book!<P>Apparently, he has also been 'accused' of sending the e-mail virus to people who don't appear in HIS address book.<P>Any comments....?

#7
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
I can only suppose e-mail addresses were harvested from messageboards such as this or the Bravenet ones. The spammers then fake headers using them to send out either viruses or fake viruses which look bad (there was one recently doing the rounds that puts up a warning box telling you your BIOS is being wiped out or something like that, but it was just a graphic pretending to be the result of a virus).<BR>If it happens again contact your ISP as they may be able to trace the culprits.

#8
offline Colin, Germany

Colin, Germany
  • National Squad - 2nd XI
    Offline
  • Posts: 3,525
  • Joined: 10 Sep 2001
Yes, it does seem to be a programme or a person collecting e-mail addresses from the message boards. I got both virus e-mails, and I do not suppose I am in Derek's or Bruce's address book. I deleted the e-mails because of the suspicious looking attachments.<P>By the way, I received another e-mail 'Home' from someone whose name I did not recognise before I received the one from Derek. I deleted that one without bothering to inform anyone.

#9
offline Guest__*

Guest__*
  • rank
    Offline
  • Joined: --
It's not gathering addresses from this board, but from Sent Items in Outlook Express. If you want to know how it's doing this go to the McAfee Virus Info site (vil.mcafee.com) and search for the virus name W32/Magistr.a@MM.<P>I only know this because my virus checker caught it on a message from Rob Steel of Beerhound a few weeks back and told me the name of the virus - so I looked it up for myself.<P>The description on that site also explains why the virus message seemed to have the Enfield v Hitchin match report as its body - it includes a random document from your C: drive as part of it. Strangely, I got something about steam engines on mine!

#10
offline MCD

MCD
  • Spectator
    Offline
  • Posts: 362
  • Joined: 6 Sep 2001
<BLOCKQUOTE><font size="1" face="Verdana, Helvetica, sans-serif">quote:</font><HR>Originally posted by <Steve>:<BR>[QB]It's not gathering addresses from this board, but from Sent Items in Outlook Express. If you want to know how it's doing this go to the McAfee Virus Info site (vil.mcafee.com) and search for the virus name W32/Magistr.a@MM.<BR>QB]<HR></BLOCKQUOTE><P>I understand what you are saying but ...<P>I have never sent Bruce an e-mail (until he contacted me advising me of what he received)<BR>therefore the would not be anything in my "Sent Items". So now what?....

#11
offline MCD

MCD
  • Spectator
    Offline
  • Posts: 362
  • Joined: 6 Sep 2001
The subject of viruses (virii ?) has raised its ugly head again.<p>Andy (TOTE) has been hit along with Neil Avery as reported on the ETFC message board tonight and... so have I at both home and work! Fortunately, I have not yet noticed any damage thanks to using a virus checker that is regularly updated.<p>Remember : ALWAYS PRACTICE SAFE HEX!!

#12
offline .Ian

.Ian
  • First XI - Sub's Bench
    Offline
  • Posts: 213
  • Joined: 6 Sep 2001
Yes there is new virus out - any virus checker that was updated before the weekend, will not pick it up.<p>I have had around 20 copies of the virus sent to me so far - many from non league sources.<p>I run Norton Antivirus 2002, that checks all incoming attachments, it gets updated on a regular basis, but even this waS not picking up the new virus before I did a manual update of the definitions yesterday.<p>Be VERY careful about opening any attachments - even if you know the person.

#13
offline ETFC Neil

ETFC Neil
  • First XI - Sub
    Offline
  • Posts: 1,217
  • Joined: 17 Oct 2001
Yes it is true that I have been sent the virus by 4 different people, but I have not been infected so the ETFC site is still up and running. Shame on you Derek, for getting my surname wrong! It's Avey not Avery... you're giving me the Bird hehehehe. <img src="graemlins/buch.gif" border="0" alt="[buch]" />

#14
offline Fruitbat

Fruitbat
  • First XI - Weekly Contract
    Offline
  • Posts: 631
  • Joined: 19 Oct 2001
I have also been hit by these viruses, but my Virus checker 'Trend Pc-cillin 7.5' which is on www.antivirus.com has picked up every instance. Worth investing in, if you have had trouble !!

#15
offline Colin, Germany

Colin, Germany
  • National Squad - 2nd XI
    Offline
  • Posts: 3,525
  • Joined: 10 Sep 2001
I have been away in Bavaria all week. So I expect there is a bunch of viruses waiting in my e-mailbox when I get home. As long as it is only a matter of deleting all the strange e-mails with attachments even if they are from people I know, it shouldn't be a problem.<p>Thanks all the same for the warning, everyone!

#16
offline MCD

MCD
  • Spectator
    Offline
  • Posts: 362
  • Joined: 6 Sep 2001
<blockquote><font size="1" face="Verdana, Helvetica, sans-serif">quote:</font><hr>Originally posted by ETFC Neil:
<strong>Shame on you Derek, for getting my surname wrong! It's Avey not Avery... you're giving me the Bird hehehehe. <img src="graemlins/buch.gif" border="0" alt="[buch]" /> </strong><hr></blockquote><p>Doh! images/icons/blush.gif" border="0

#17
offline Cyclops

Cyclops
  • First XI - Sub
    Offline
  • Posts: 1,117
  • Joined: 3 Dec 2001
<blockquote><font size="1" face="Verdana, Helvetica, sans-serif">quote:</font><hr>Originally posted by McD:
<strong>The subject of viruses (virii ?) has raised its ugly head again.<p>Andy (TOTE) has been hit along with Neil Avery as reported on the ETFC message board tonight and... so have I at both home and work! Fortunately, I have not yet noticed any damage thanks to using a virus checker that is regularly updated.<p>Remember : ALWAYS PRACTICE SAFE HEX!!</strong><hr></blockquote><p>A good point to note here is never open any attachment which has more than one dot in the name. They usually end something like ".doc.pif" or ".doc.scr" in an attempt to make your e-mail program associate the file with an application (in this case, pretending to be a .doc file and associating with Word/WordPerfect/Wordpad).




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

View New Posts

List of all CLUBS on Fans Focus