The Forge Reference Project

 

Topic: War story (probably)
Started by: Ron Edwards
Started on: 7/24/2001
Board: Adept Press


On 7/24/2001 at 8:25pm, Ron Edwards wrote:
War story (probably)

Yesterday I received a friendly message from someone, asking me for any "advice" on an attached file called ACPexe1_7.exe. I wrote back asking for some context - who he was, what was the file, why talk to me, and so on.

I did not open/run the file. It ended with "exe" after all.

Today I received a "message returned" postmaster letter, stating that the alias (Bryan_Scott_Hefner) was unknown/illegal.

Ah ha, thinks I, and deleted the bejeezus out of the original letter.

The text of that letter was friendly, flattering, and entirely vague - it did not have any mention of RPGs or any other thing, it mentioned nothing about the purpose of the file, and it just oozed familiarity, as if the fellow and I had already exchanged a few letters.

Beware, everyone. The fuckers DO exist.

Best,
Ron

Message 366#3272

Previous & subsequent topics...
...started by Ron Edwards
...in which Ron Edwards participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/24/2001




On 7/24/2001 at 8:36pm, Jared A. Sorensen wrote:
RE: War story (probably)

Yup. There are a slew of nasty viruses out there that have exactly that type of message, along with a payload of evil file-destroying content. One of the newest is called "sircam.exe" and contains the message:

"Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"

This virus reproduces by using the the ol' "send to everyone in your address book" method. Obviously, never run any weird .vbs or .exe file...or allow macros in any Word/etc. document.

And don't talk to strangers, even if they DO have the best candy.

Message 366#3274

Previous & subsequent topics...
...started by Jared A. Sorensen
...in which Jared A. Sorensen participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/24/2001




On 7/24/2001 at 10:19pm, Ron Edwards wrote:
RE: War story (probably)

Hey Jared,

That was the EXACT text of the message, as it happens.

Best,
Ron

Message 366#3283

Previous & subsequent topics...
...started by Ron Edwards
...in which Ron Edwards participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/24/2001




On 7/24/2001 at 11:36pm, GreatWolf wrote:
RE: War story (probably)

Hmm. One wonders if a "cyber-Sorcerer" chronicle could be run, with viruses and other computer programs being the "demons".

(Seth scratches his head and thinks.)

Message 366#3291

Previous & subsequent topics...
...started by GreatWolf
...in which GreatWolf participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/24/2001




On 7/25/2001 at 1:33am, Supplanter wrote:
RE: War story (probably)

That's the last thing we need is the FBI busting in on Ron's house and giving him the ol' Steve Jackson Treatment. :wink: Heck, for all I know, Ron may have a dog, and SWAT teams seem to be obsessed with shooting dogs.

Best,


Jim

Message 366#3304

Previous & subsequent topics...
...started by Supplanter
...in which Supplanter participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/25/2001




On 7/25/2001 at 11:58pm, Clay wrote:
RE: War story (probably)

About once every two months I get something like that too, but the text of the message looks like bad notes from a meeting.

Computer Viri as demons wouldn't be a bad idea. It sounds a lot like the whole "Ghost In The Machine" idea. The thing probably should be written by somebody with a computer security background though (Clinton, you listening). I've got just enough of a security background that I can sniff out when an author is BSing the technical stuff, and it grates. Best that a non-technical author shouldn't try to get technical.

Message 366#3347

Previous & subsequent topics...
...started by Clay
...in which Clay participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/25/2001




On 7/26/2001 at 3:43am, Paul Czege wrote:
RE: War story (probably)

I just got this virus emailed to me. It came anonymously. The text of the email was exactly the same as Jared described. The attached file was named risus15.zip.pif, although the .pif extension was not visible within Windows Explorer. I think I need to have a conversation with S. John Ross.

Message 366#3355

Previous & subsequent topics...
...started by Paul Czege
...in which Paul Czege participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 4:46am, Gordon C. Landis wrote:
RE: War story (probably)

If you want the details, take a look at:

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

The virus is apparently clever enough to name its' attachment after a file on the (unsuspecting) sender's computer.

Gordon C. Landis

Message 366#3356

Previous & subsequent topics...
...started by Gordon C. Landis
...in which Gordon C. Landis participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 4:57am, Paul Czege wrote:
RE: War story (probably)

Hey Gordon,

Yeah, I was joking about taking my ire to S. John Ross. I doubt my email address is on his computer. However, with the virus supposedly getting its name from a random file on the sender's infected computer, it just so happens I got something I recognize. So I know from the Risus filename that it was some gamer I've corresponded with who must have sent it to me. It's disappointing actually. I wish I could blame it on my stepdad.

Paul

Message 366#3357

Previous & subsequent topics...
...started by Paul Czege
...in which Paul Czege participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 5:03am, Gordon C. Landis wrote:
RE: War story (probably)


On 2001-07-26 00:57, Paul Czege wrote:
Yeah, I was joking about taking my ire to S. John Ross.


No, no, take your ire to him - I understand he's running out and needs more :wink:

Gordon C. Landis



Message 366#3359

Previous & subsequent topics...
...started by Gordon C. Landis
...in which Gordon C. Landis participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 5:47am, joshua neff wrote:
RE: War story (probably)

I just got an email much like the one's you describe--here's a generic email with an attachment I won't describe for you to look at.
Riiiiiight. Delete. Bye bye, sucker.

Message 366#3362

Previous & subsequent topics...
...started by joshua neff
...in which joshua neff participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 9:14am, Mytholder wrote:
RE: War story (probably)


So I know from the Risus filename that it was some gamer I've corresponded with who must have sent it to me. It's disappointing actually.

Whoever you got the virus from doesn't know they sent it to you. SirCam reads your outlook address book and sends a random file to people in the address book. The person using the computer doesn't know what's going on. They're innocent (apart from being stupid enough to open an infected file....)

Message 366#3369

Previous & subsequent topics...
...started by Mytholder
...in which Mytholder participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/26/2001 at 9:55pm, greyorm wrote:
RE: War story (probably)


On 2001-07-24 19:36, GreatWolf wrote:
Hmm. One wonders if a "cyber-Sorcerer" chronicle could be run, with viruses and other computer programs being the "demons".

Wait a week!

Message 366#3387

Previous & subsequent topics...
...started by greyorm
...in which greyorm participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/26/2001




On 7/27/2001 at 2:09pm, Clay wrote:
RE: War story (probably)


On 2001-07-25 23:43, Paul Czege wrote:
The attached file was named risus15.zip.pif, although the .pif extension was not visible within Windows Explorer. I think I need to have a conversation with S. John Ross.


I'm not sure what this virus does, but I can tell you that it was written with Delphi. I'm also going to go out on a limb and suggest that it was targetted at members of this board, considering how many people here have received it, and the specificity of the message.

Yesterday was a banner day, with two separate viri arriving in my mainbox.

Message 366#3397

Previous & subsequent topics...
...started by Clay
...in which Clay participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/27/2001




On 7/27/2001 at 3:31pm, Jack Spencer Jr wrote:
RE: War story (probably)

shit. this is all my fault.

Actually it isn't my fault, it's the fault of the guy who sent me the damn thing in the first place. But I was stupid and opened it and now it spreads.

Damn damn damn

I wonder why the virus used "Risus15.zip" as a name and not "Elfs.zip"? hm... descructive and biased...

Message 366#3400

Previous & subsequent topics...
...started by Jack Spencer Jr
...in which Jack Spencer Jr participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/27/2001




On 7/27/2001 at 9:59pm, greyorm wrote:
RE: War story (probably)


I'm also going to go out on a limb and suggest that it was targetted at members of this board, considering how many people here have received it, and the specificity of the message.

Don't get too paranoid, Clay, this virus was reported in the wild a week before anyone on the boards here got it.

Message 366#3418

Previous & subsequent topics...
...started by greyorm
...in which greyorm participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/27/2001




On 7/31/2001 at 12:21pm, Ian O'Rourke wrote:
RE: War story (probably)

I got that Risus.zip one as well - which I thought was weird due to it being role-playing related. It asked me to check it out and tell 'him' what I thought.

Since it was a .zip and the sender was an invalid address I just deleted it - which bastard has me in their address book then? :smile:

Saying that I believe MJ sent an apology to a few people because his computer was infected - whether this is related I have no idea.

Message 366#3544

Previous & subsequent topics...
...started by Ian O'Rourke
...in which Ian O'Rourke participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/31/2001




On 7/31/2001 at 9:37pm, Mike Holmes wrote:
RE: War story (probably)


On 2001-07-31 08:21, Ian O'Rourke wrote:
I got that Risus.zip one as well - which I thought was weird due to it being role-playing related. It asked me to check it out and tell 'him' what I thought.

Since it was a .zip and the sender was an invalid address I just deleted it - which bastard has me in their address book then? :smile:



Me too. No return address, so I killed it. I am on that list as well it would seem. Almost fell for it because people have been sending me lots of stuff of late.

And I have gotten mail from MJ before. Hmmm.....

Mike Holmes

Message 366#3591

Previous & subsequent topics...
...started by Mike Holmes
...in which Mike Holmes participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 7/31/2001




On 8/22/2001 at 1:46am, Ben Morgan wrote:
RE: War story (probably)

I can tell you it's got nothing to do with this board. I received one of these over a month ago, and I've only recently arrived here in the last week or so.

The first piece of advice is don't run any attachments you didn't ask for specifically, even from someone you know. If it is from someone you know, you can confirm the validity of the file. If not, then they have no business sending you files to begin with.

Also, these things seem to rely on Outlook to spread. If you use a different email program, you reduce the risk of infecting others (unless someone's modified the code recently).

Message 366#4494

Previous & subsequent topics...
...started by Ben Morgan
...in which Ben Morgan participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 8/22/2001




On 8/22/2001 at 2:03pm, FilthySuperman wrote:
RE: War story (probably)

Just a few little snippets to be the helpful superhero I am.

First off, it's not just outlook users that need to be wary.
Outlook is a prime target for virus/worm spreading, but and SMTP, PPP, or POP3 address book can be used. I just put up with a nasty little CodeRed outbreak here at work that attacked our users all over the place. We had one person who's machine was sending out 2-3 hundred emails every second hour. The beauty of this particular virus was, he was using a Novell based email client and it was able to replicate and send itself using our Novell, NT, and SMTP clients. It's been said a billion times, but it can't be said enough: As a rule don't open unsolicited email, and NEVER EVER EVER EVER EVER open a file attachment sent via email that you did not SPECIFICALLY request. It's sad, as indie gamers we want to help people out, but your own mother could email you a destructive virus without knowing it. For those of you who get sick and tired of getting viruses emailed to you and want to do something about it..
when you recieve a virus or possible virus in your email:

First notify YOUR isp.
Then notify Thier isp.
if they use a free email client such as hotmail or yahoo don't let that stop you from contacting people. Contact hotmail or Yahoo and tell them that such and such user was sending viruses. Sending computer viruses over the internet is a Federal crime and as such, can be investigated in completion. Which means, if said person has caused damage (especially in a government system) then they WILL be backtraced and they'll find out who "supersexygirl@hotmail.com" is. There is very little true anonymity on the internet, and certainly not as much as people think there is.

Hope this is helpful, if anyone here has any security or technical questions feel free to drop me a line.

If you are wondering whether or not I'm qualified to give advice on this matter...
Well :razz: any of you in the U.S.of A. paying taxes are already paying me to do it anyway.

T

Message 366#4512

Previous & subsequent topics...
...started by FilthySuperman
...in which FilthySuperman participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 8/22/2001




On 8/23/2001 at 1:04am, Ben Morgan wrote:
RE: War story (probably)

Thanks for the info. It seems the little bastards have been working overtime (Though when haven't they been; Anyone remember the Jerusalem-B virus? Or the Pakistani Brain?).

Message 366#4558

Previous & subsequent topics...
...started by Ben Morgan
...in which Ben Morgan participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 8/23/2001




On 8/23/2001 at 4:56pm, Ron Edwards wrote:
RE: War story (probably)

Gentlemen etc,

I believe this thread is now dead. Please let it lie.

Best,
Ron

Message 366#4597

Previous & subsequent topics...
...started by Ron Edwards
...in which Ron Edwards participated
...in Adept Press
...including keyword:

 (leave blank for none)
...from around 8/23/2001