The subject is “hi” and it purports to attach a screensaver that “I know you’ll love.” Don’t be a dope and open it like I did (it didn’t look fishy to me).
My office got about 8 zillion emails with this message. But we had been forwarned not to open them. They’ve shut down the email system meanwhile.
What happened when you opened it?
Is this an .exe program that automatically takes over once you open it?
Jet Black
We got no forewarning. Nothing in particular happened when I opened it, but our IT has warned any of us who opened it NOT to reboot until he can take steps. In the meantime, of course, we are deleting without opening all repetitions of the email.
No warnings from our IT department yet.
Mind you, they were 5 to 6 months behind on the Snow White virus.(Even after many infected systems.):rolleyes:
Ah well, I’d love to let them know about and warn my fellow employees, but I’ve already been chewed out for doing so before.
I’m just gonna sit back now and let the havoc begin.
I sell corporate software for, and I’ve seen this a couple of times today. This one is a doozy. If you get it, do NOT reboot! It will attempt to delete AntiVirus software by detecting AV services running, and deleting the .exe file associated with that service. Instead, go to the your respective AntiVirus vendors’ sites for writeups. I’ve provided a link to Symantec if you don’t know where to go.
More info:
Downright nasty.
That should read “I sell corporate software for a Network Security vendor…”
Really, I know what I’m talking about, I swear :rolleyes:
Jet Black: I’m not a computer whiz, but the program was an .exe which tried to do funky things when I opened it (although the attachment was not labeled as a .exe attachment). It flashed by quickly, but it was something like “grn.exe,” or along those lines.
Mine had an attachment “gone.txt”. Though I understand that with some viruses, the ostensible extension is actually part of the name, with the real extension hidden.
Ours too. It’s been down for a good three or four hours already, but in a way, it’s nice not to be getting 70 emails throughout the day.
I believe it was a .scr file. A screensaver.
We got it here too, but I didn’t open it to check what the attachment was (I know better than to open the attachment though). I had about 30 copies in my inbox. I was just a little suspicious.
It might have been .scr.exe, or it might have been plain old .scr
Most people probably don’t know that a screensaver is just a special format of an executable. It contains executable code that ends up getting run by Windows. That’s why a lot of people that see the extensions, and know not to open an exe, got hit with it. Many people don’t know that .scr is just as deadly, since it gets executed.
At least, I’m pretty sure that’s how screensavers work. I’m starting to doubt myself now.
Got hit with it where I work too. It was somewhat amusing. It came in through one of the IT department guys that I work with, and sent out to his entire address book, like any good worm would. So the people that opened it and were crippled by it called and were like “But we got it from Karl, it couldn’t have been a virus!” How often does Karl send emails saying “hi I am in a harry” ?!? Oy vey.
I’ve recieved 54 messages with the attachment. Some bozo at the main office opened it and rebooted, with predicatable results. Worse, Infrastructure Services was slow updating the signatures and definitions, so I had to endure periodic blasts of 'Hi! HI! hi! Hi! HI!" all afternoon.
Blech.