is this a vius please

Viruses and worms
1

hi yesterday a message was sent to everyone in my hotmail address book. I DID NOT SEND IT.

This is what was sent:

Hi! How are you?
You know I’ve created my own website!
Can you check how it works?
It’s http://www.goresxa.com/test
Can you see video?
Bye!

along with this attachment Attachment : IMSTP.gif (0.02 MB)

I got replies from folks saying that they could not see it. AVAST is showing no virus on my pc.
Any help would be appreciated. Thanks, Jess

2

Hello :slight_smile:

Can you try to upload this file to virusscan.jotti.org to see if the file is detected as a virus :wink:
Also can you post your HijackThis Log file - here’s the program download link http://download.hijackthis.eu/hijackthis_199.zip

3

You may well have an trojan emailer/spambot on your system.

What is your OS and email program ?

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
Ewido Security Suite If using winXP. or a-Squared free if using win98/ME.

4

Im using xp media centre. will try ewido and see

5

I had the same problem with an old hotmail account of mine earlier today. It is below.

Hi! How are you?
You know I’ve created my own website!
http://virusscan.jotti.org/
Can you check how it works?
It’s
Can you see video?
Bye!

It seems to be only affecting hotmail accounts, see the following URL’s.

http://www.theanswerbank.co.uk/Internet_and_Technology/Question227567.html

http://www.sitepoint.com/forums/showthread.php?p=2698188&posted=1#post2698188

elow is an email I just sent out to evreyone who got sent it.

If you opened the email sent from this address(or any other) today then it likly to be a virus it tried to install o your machine. If you did not download and install the exe at the URL then you are fine. If you did you have a trojan which is too New for AV software to find it, apart from one of them. The AV software that finds it can be downloaded at the below url.

http://www.nod32.com/download/index.php

Information on the virus is on the URL’s below.

TrojanDownloader.Zlob.MO

http://research.sunbelt-software.com/threat_display.cfm?name=Vcodec&threatid=42096

http://securityresponse.symantec.com/avcenter/venc/data/trojan.zlob.k.html

Sorry evreyone, seems to be a problem with hotmail accounts only (one of the reasons I no longer use it).

6

Very clever!

This virus is attempting to do a Distributed Denial of Service attack on sites like Jotti’s by sending out mass emails and requesting that they click on the link and try to access the site. If many people do this, the jotti server may not be able to cope with all the traffic

7

Maybe that’s why Jotti is so busy all the time recently!

8

Hi Xistenz,

You realize now that the main cause of this and other malware problems, spam mails, denial of service, is BOTNETS. 26% of American computers is part of a botnet, while uncle B was a bit lazy installing antivirus updates or a firewall on his brand new computer. It is now part of a botnet driven by one criminal, rented out to perform all sorts of illegal actions. Because it is uncle B and he does not want to know, this situation is going on, endangering all the rest of the Internet structure for years to come. Are we no longer interested, or is this situation tolerated because of greed.
When the new Vista comes in, for a dual way firewall you have to pay an extra 50 bucks, and poor uncle B has to earn this, and he has never heard of free ZoneAlarm, so the botnet-owner goes on spamming, harassing, malware exploiting, phishing and what have you. A pity nobody sees this for what it is, a scam.

polonus

9

in the end more people will know about jotti and virustotal etc. and it will turn against authors of these scam emails :slight_smile:

speak about irony :slight_smile: