Just a Heads Up... USERS BEWARE!!!

[Captain Jim]

Until I got my Jeep and started posting on this site, jeepforum.com, jeepz.com & NewEnglandJeepz I never had any problem with my computer, email or spam. Now all of a sudden I have 300 spam emails every few days clogging my mailbox. Even worse this week I just got notices from my website/email host that they are going to disable my account because they have had thousands of complaints from people that they are being spammed BY ME!!!

They said if it wasn't me doing it purposely doing it then I probably have a virus. I bought and installed a new Norton Anti virus program, ran it and guess what... Appearantly my machine contracted a virus/trojan horse called 32Netsky somewhere. Of the approximately 55,000 files scanned on my machine almost 8000! were infected (7,913 to be exact).

I had Norton quarentine all those files and then had them DELETED. I think my machine is now clean & I would like to keep it that way so I have disabled my email name CaptainJim@aquacorps.com . Anyone wishing to email me can do so through my website www.aquacorps.com . I will not be posting here it for public viewing as it then becomes to easily accessible to spammers & hackers.

Just a warning to everyone to watch out!

Thanks,
Capt. Jim

// ADMIN NOTE: There is no spamming involved with this site. Our database is secure and we do not sell or trade ANY user's information.

[JeepGal]

wow...sorry to hear that.

Im a member of JF, JU, JH, MJR and a few small others...and I havent had anything like this happen to me.

[blkTJ]

JH?

[sarah]

I can guarantee you that THERE IS NO SPAM FROM THIS SITE. We have NO ADS and NO THIRD PARTY sites accessing ANY part of our database. We also do NOT SELL OR TRADE any users information.

Sorry to hear about your troubles but I GUARANTEE you that there are no problems like that on our site.

[Dukes69]

I'm a member of all of those sites as well, I've NEVER had any problems. Good luck with the fight

[sarah]

jim, the other thing is that NO ONE CAN SEE YOUR EMAIL ADDRESS HERE UNLESS YOU POST IT IN THE THREAD. so you might want to delete that, if you're so concerned.

[PondScum]

I-Worm/Netsky

This worm spreads through e-mail, shared network drives and KaZaA.

I-Worm/Netsky.A
Installation:
When the worm is launched it copies itself as services.exe to Windows Directory and registers itself as service in Run key in Windows Registry.

Spreading: e-mail
Worm spreads by sending itself to e-mail addresses that are taken from files with MSG, OFT, SHT, DBX, TBB, ADB, DOC, WAB, ASP, UIN, RTF, VBS, HTML, HTM, PL, PHP, TXT and EML extension.

Message format is as following:
Sender address:
Is faked and is one of the following:
Ebay Auctions <responder@ebay.com>
QXL Auctions <responder@qxl.com>
MSN Auctions <auctions@msn.com>
Amazon automail <responder@amazon.com>
Yahoo Auctions <auctions@yahoo.com>
EBay Auctions <responder@ebay.com>

Message subject:
Auction successful!

Attachment name:
Is generated from several names, often with double extension. In some cases it could be in ZIP file. For example:
prod_info_47532.doc.scr
prod_info_54433.doc.exe

Spreading: networks
Worm tries to copy itself with different names to several folders on all accessible network drives. By this it could spread by local network, KaZaA or other shared networks as well.

I-Worm/Netsky.B
Installation:
When the worm is launched it copies itself as services.exe to Windows Directory and registers itself as service in Run key in Windows Registry.

Spreading: e-mail
Worm spreads by sending itself to e-mail addresses that are taken from files with MSG, OFT, SHT, DBX, TBB, ADB, DOC, WAB, ASP, UIN, RTF, VBS, HTML, HTM, PL, PHP, TXT and EML extension.

Message format is as following:
Sender address is faked.

Message subject and body are generated from the following texts:
something is fool
something is going wrong
you are bad you try to steal
you feel the same
you earn money
thats wrong why?
take it easy
reply
do you? that's funny
here, the cheats
here, the introduction
here, the serials
from the chatter
about me
information about you
something is going wrong!
stuff about you?
greetings
see you here it is
that is bad yes, really?
i found this document about you your name is wrong
i hope it is not true!
kill the writer of this document!
something about you!
I have your password!
you are a bad writer
is that from you?
i wait for a reply!
is that your account?
is that your name?
is that true?
here
my hero read it immediately!
here is the document.
read the details.
i'm waiting ok
what does it mean?
anything ok?

Attachment name:
Is generated from several names, often with double extension. In some cases it could be in ZIP file.

Spreading: networks
Worm tries to copy itself with different names to several folders on all accessible network drives. By this it could spread by local network, KaZaA or other shared networks as well.

I-Worm/Netsky.D
Installation:
When the worm is launched it copies itself as winlogon.exe to Windows Directory and registers itself as ICQ Net in Run key in Windows Registry.

Spreading: e-mail
Worm spreads by sending itself to e-mail addresses that are taken from files with dhtm, cgi, shtm, msg, oft, sht, dbx, tbb, adb, doc, wab, asp, uin, rtf, vbs, html, htm, pl, php, txt and eml extension.

Message format is as following:
Sender address is faked.

Message subject could be as following:
Re: Your website
Re: Your product
Re: Your letter
Re: Your archive
Re: Your text
Re: Your bill
Re: Your details
Re: My details
Re: Word file
Re: Excel file
Re: Details
Re: Approved
Re: Your software
Re: Your music
Re: Here
Re: Re: Re: Your document
Re: Hello
Re: Hi
Re: Re: Message
Re: Your picture
Re: Here is the document
Re: Your document
Re: Thanks!
Re: Re: Thanks!
Re: Re: Document
Re: Document

Message body could be as following:
Your file is attached.
Please read the attached file.
Please have a look at the attached file.
See the attached file for details.
Here is the file.
Your document is attached.

Attachment message could be as following:
your_website.pif
your_product.pif
your_letter.pif
your_archive.pif
your_text.pif
your_bill.pif
your_details.pif
document_word.pif
document_excel.pif
my_details.pif
all_document.pif
application.pif
mp3music.pif
yours.pif
document_4351.pif
your_file.pif
message_details.pif
your_picture.pif
document_full.pif
message_part2.pif
document.pif
your_document.pif

On March 2, 2004 worm produced random sounds on infected computer PC speaker.

Worm also contains this text:
be aware! Skynet.cz - -->AntiHacker Crew<--

[sarah]

thanks, pondscum.

[NAILER341]

i have had my share of virus's... not this one yet, but i have had the ones that email all of your contacts... what a pain! make sure you stay up to date on your windows updates, and your anti-virus updates. good luck!

[Guest]

The last computer virus I was infected with was the old "Stoned" virus, back in the day when I was still buzzing along on my old 8088...

[igofshn]

Re: Just a Heads Up... USERS BEWARE!!!

Originally posted by Captain Jim
Until I got my Jeep and started posting on this site, jeepforum.com, jeepz.com & NewEnglandJeepz I never had any problem with my computer, email or spam. Now all of a sudden I have 300 spam emails every few days clogging my mailbox. Even worse this week I just got notices from my website/email host that they are going to disable my account because they have had thousands of complaints from people that they are being spammed BY ME!!!

They said if it wasn't me doing it purposely doing it then I probably have a virus. I bought and installed a new Norton Anti virus program, ran it and guess what... Appearantly my machine contracted a virus/trojan horse called 32Netsky somewhere. Of the approximately 55,000 files scanned on my machine almost 8000! were infected (7,913 to be exact).

I had Norton quarentine all those files and then had them DELETED. I think my machine is now clean & I would like to keep it that way so I have disabled my email name CaptainJim@aquacorps.com . Anyone wishing to email me can do so through my website www.aquacorps.com . I will not be posting here it for public viewing as it then becomes to easily accessible to spammers & hackers.

Just a warning to everyone to watch out!

Thanks,
Capt. Jim

// ADMIN NOTE: There is no spamming involved with this site. Our database is secure and we do not sell or trade ANY user's information.

It is definately email related.

[blkTJ]

Originally posted by blkTJ
JH?

[mikeythefireman]

I got a weird email from YAHOO.COM saying I was spamming a bunch of people. They said if it wasn't me, then it was something called email by proxy, which is a virus that causes emails to be sent from your address. The thing is, it wasn't a legit email. I've received notices from yahoo before and they were different. It had a link to fix the problem, but it was to a nasty (not the good nasty,just lots of popups) popup site.

[igofshn]

Originally posted by blkTJ
JH?

Jeep horizons


Mr B's so called friends that dumped him and his site....

[blkTJ]

Originally posted by igofshn
Jeep horizons


Mr B's so called friends that dumped him and his site....

thanks Al.