This site uses cookies.
Some of these cookies are essential to the operation of the site,
while others help to improve your experience by providing insights into how the site is being used.
For more information, please see the ProZ.com privacy policy.
ellitrad France Local time: 17:08 German to French + ...
Aug 20, 2003
I got this virus today through a mail with email adress [email protected] subject Re:your application (with attachment); opening the mail (not the attachment)my mail program got crazy, sending automatically messages to my whole adress book, blocking everything. How to eradicate: stop the Internet connection. The virus generates a exe.file C:\windows\winppr32.exe which you have to delete; if deleting (through Windows Explorer) is not possible, first... See more
I got this virus today through a mail with email adress [email protected] subject Re:your application (with attachment); opening the mail (not the attachment)my mail program got crazy, sending automatically messages to my whole adress book, blocking everything. How to eradicate: stop the Internet connection. The virus generates a exe.file C:\windows\winppr32.exe which you have to delete; if deleting (through Windows Explorer) is not possible, first desactive this exe.program with Task Manager, then delete. Be aware of messages with subjects as "Re:details" "Re:your application" "Re:wicked screeensaver" "Re:thank you!" ▲ Collapse
Subject:
Comment:
The contents of this post will automatically be included in the ticket generated. Please add any additional comments or explanation (optional)
Claudia Iglesias Chile Local time: 11:08 Member (2002) Spanish to French + ...
Apparently we did NOT open the attachment and it spred anyway, only by opening the email. The solution I used to delete it worked perfectly, and checking the emails on the server before downloading them seems to be a good way not to be contaminated (possible with wanadoo.fr in France)
Subject:
Comment:
The contents of this post will automatically be included in the ticket generated. Please add any additional comments or explanation (optional)
Ralf Lemster Germany Local time: 17:08 English to German + ...
Sender's address is spoofed
Aug 20, 2003
What's important to note here is that the sender's address shown is not genuine - recent email worms usually combine sender's adress, recipient's address and reference line at random.
IOW the chances of that message having been sent by Marta are extremely remote - what is certain is that the infected system sending the message had Marta's address stored.
Best regards, Ralf
Subject:
Comment:
The contents of this post will automatically be included in the ticket generated. Please add any additional comments or explanation (optional)
ellitrad France Local time: 17:08 German to French + ...
TOPIC STARTER
infected address book
Aug 21, 2003
[quote]Ralf Lemster wrote:
IOW the chances of that message having been sent by Marta are extremely remote - what is certain is that the infected system sending the message had Marta\'s address stored.
I clearly didn\'t mean Marta was the sender, and I share your point of view, I just posted this topic because I thought that other ProZ members were at risk of being infected too, and apparently this worm is quite new in France. Regards Marie Ellie
Subject:
Comment:
The contents of this post will automatically be included in the ticket generated. Please add any additional comments or explanation (optional)
Ralf Lemster Germany Local time: 17:08 English to German + ...
Just to avoid misunderstandings...
Aug 21, 2003
Hi Marie,
I clearly didn't mean Marta was the sender, and I share your point of view, I just posted this topic because I thought that other ProZ members were at risk of being infected too, and apparently this worm is quite new in France.
I know you didn't want to implicate Marta - it's just that we had loads of misunderstandings when the Bugbear worm (IIRC the first worm to spoof addresses) started spreading.
Sobig as such isn't that new, but the Sobig.F variant is - and it seems to be very aggressive, judging by the number of reported attacks or contaminations. Thanks for posting the warning.
Best regards, Ralf
Subject:
Comment:
The contents of this post will automatically be included in the ticket generated. Please add any additional comments or explanation (optional)
Exclusive discount for ProZ.com users!
Save over 13% when purchasing Wordfast Pro through ProZ.com. Wordfast is the world's #1 provider of platform-independent Translation Memory software. Consistently ranked the most user-friendly and highest value
Translation Office 3000 is an advanced accounting tool for freelance translators and small agencies. TO3000 easily and seamlessly integrates with the business life of professional freelance translators.