Got word from bogs [Archive] - Racerplanet Network Forums

View Full Version : Got word from bogs


AccadaccA
05-09-2002, 01:39 AM
Another letter from bogs, this time he really sent it and not an iworm.

**************************************************
you know , its the damndest thing , how you never get free time till theres something goofy going on < sigh >
during the last week , i recieved no less than 25 emails with files ( bat , exe , script , etc ) that wanted to open themselves and start running . as we both know , thats a no no < generally speaking , of course > and so each and every one was cancelled .
normally , i'd consider this to be no more than the run of the mill for being online , however , each and every email that tried this was one that had my personal email addy ( not my web addy , which is what most nuts have ) and almost all of them were from names i remembered from the nfs scene . the last round came with one from justin , aka ih8cops , although i now have doubts he actually sent it thanks in no small part to jp's thread on virus emails ( yes , getting an email from justin and remmy made me curious enough to go see who else was being bothered by this ) .
i'm including a quote of the email i sent to justin < which i dont know if he got or not > and the jpegs that i included in the original i sent him showing the names and different types of attachments .
email quote begins --
"
unfortunately , i can't say as i really believe you actually sent this to me . i've been getting a lot of mails like this from you and other people i've met and even people i haven't that try to open and automatically run files ( note the enclosed jpegs ) .
so far i've gotten one from remko , tomcat , smokey ( one of the enclosed ) and a number of others , the total hitting 25 this week alone .
my policy is not to just let something auto run , especially from the mail box , and i'm beginning to think that with the numbers , frequency , and so on that this is some kind of virii . why include 2 jpgs of it ? notice the difference in file names.
however , so far , every single mail i've recieved like this the behaviors been the same . something to check for , although with the diff names i have no idea what to tell you to look for . i'm guessing its a worm , and not an actual destructive payload virii , but haven't actually had time to go study up on it .
you may want to pass on the infor to the other guys at total and cheats boards , just in case . it does seem to be a wide spread epidemic . good luck , bud ,
bogs ( old total board guy ) " -- quote ends

the multimail jpgs i've included show the last 4 mails i was in the process of deleting , as well as what i saw when i opened the mail from justin . again , considering the discussion of the thread , which i read after sending that reply , i'm guessing justin did not actually send this email , BUT at the bottom of the thread you said something that caught my eye . you said you recieved a mail from ME .
that left me to wonder , consider this . the only person i've contacted from my old nfs days on the board ( aside from you in this email ) is justin . if this worm spoofs emails from an infected computers outlook version , then its possible justin has it on his system . the timing for you to recieve an email from me with one of these files was extraordinary in that , as far as i can see , you got it within days of my sending that mail to justin .
i also saw you again mentioning f-prot , and for shits and giggles , i downloaded it heh , and used it alongside my own permanent a/v ( avg antivirus ) . neither scanner is picking up anything from my own system < see attached fprotscan.jpg > , so its dubious that i am infected . i have not found any of the virus / worms names on my system either , in any of its versions , although i suppose anything is possible i'm pretty sure i'm uninfected .
enough of the worm dribble , heh .

i hope this finds you doing well , while i was on the boards i was impressed to find that you had gone out and completely revamped your system . congrats , it sounds like you put together a real killer machine . i was a little disheartened to hear you still get a lot of crashes , though : o\
i hope you come through this worm thing unscathed , as it should be for all good and gentle folk ;o)
bogs < from the tnfs boards >

p.s. , NICE new sig you have there , hahahahahahahahahahhahahah. but no gogo mobile ??????? BLASPHEMY !!!!

http://www.totalnfs.net/temp/multmail.jpg

http://www.totalnfs.net/temp/multimail2.jpg

Remko
05-09-2002, 04:36 AM
Dang, this is weird... I have had both Josh and RunR reporting to me that they received an empty email from me in the last few days... both from my old remko@quicknet.nl address - an address that should have been invalid months ago.
I have done a full scan with Nortoin AV 2002 recently, and did not find anything. Myself I have received such dubious mails from RyanT and Smokey too, but Norton intercepted them before they could do anything.

Has anybody else received any dubious emails from my remko@quicknet.nl addy perhaps? If you do, please delete it, because it could never have been sent by me (I have been using only r.vanreijsen@chello.nl since autumn 2001 now)

Wazza
05-09-2002, 05:02 AM
hqhaaa... about once every 3 days.. i get an email, of around 100-200kb.. and inside, there is nothing.. no attached file (well it seems), no text... only the email it came from... and some odd email address... is this is a virus too? this is in my hotmail.. wazza6_6_6@hotmail.com :rolleyes:

AccadaccA
05-09-2002, 05:17 AM
Wazza : Quite possibly YES. Hotmail might block the actual attachment for you and a blank email is definately suss.

Remmy : I know exactly how you feel mate. Not nice is it?
Sorry you are the victom of some low-life's idea of fun. Same with all who have iworms sending their good name throughout the community in a bundle of nasties. :(

Best of luck through this (and any future epidemics) to all.