Go Back  FlyerTalk Forums > Community > CommunityBuzz
Reload this Page >

I'VE BEEN HIT! VIRUS ATTACK!

Community
Wiki Posts
Search

I'VE BEEN HIT! VIRUS ATTACK!

Thread Tools
 
Search this Thread
 
Old Feb 12, 2001 | 2:29 pm
  #1  
Original Poster
20 Years on Site
 
Join Date: Jun 2000
Location: Manhattan, NY
Programs: USAir AA Hilton
Posts: 3,567
I'VE BEEN HIT! VIRUS ATTACK!

Hopefully I didn't hit any of you! Multitasking comes at a price - while in the middle of something - I received an email with a .vbs attachment - I KNOW better - but I was so excited to hear from a friend I hadn't heard from in months I opened it - and immediately realized my mistake. It's a worm virus and immediately went thru my entire contact list.

The email is titled: here you have,; o) the attachment is titled: annakournikova.jpg.vbs

If you get this PLEASE delete it and then delete your "deleted files". And, I might sheepishly recommend you update your dat files in your virus software.
svpii is offline  
Old Feb 12, 2001 | 2:31 pm
  #2  
FlyerTalk Evangelist
10 Countries Visited
20 Countries Visited
 
Join Date: Nov 1999
Programs: FB PLT again afater a decade as plebian
Posts: 22,946
Best thing to do of course is to simply not use MS Outlook/Outlook Express or whatever mailers that run Visual Basic. I use Pegasus.
YVR Cockroach is offline  
Old Feb 12, 2001 | 2:51 pm
  #3  
 
Join Date: Jul 1999
Location: ATL, DL GM
Posts: 105
This baby just ran through our corporate email system this afternoon. It's funny how nonchalant I've become about watching my email inbox instantaneously fill with 150-200 emails!

I just create a rule that permanently deletes all messages with the offending subject and go back to work.

FWIW, in Outlook, make sure you turn off the preview pane. The preview pane opens the message and allows the virus to do its thing. Also, put in filter to delete all .VBS attachments as well.

This from Symantec:

VBS.SST@mm
Discovered on: February 12, 2001
Last Updated on: February 12, 2001 at 10:10:59 AM PST


The Symantec AntiVirus Research Center (SARC) has confirmed a new mass-mailing worm. SARC is currently analyzing the worm. The worm is being reported in an attachment named ANNAKOURNIKOVA.JPEG.VBS. SARC recommends that you filter attachments with a VBS extension if you have not already done so.


boatman is offline  
Old Feb 12, 2001 | 2:52 pm
  #4  
doc
A FlyerTalk Posting Legend
 
Join Date: May 1999
Posts: 46,817
Sorry to hear this and I just posted this in OMNI too - but a bit late!
http://www.flyertalk.com/forum/Forum...ML/001617.html
doc is offline  
Old Feb 12, 2001 | 2:59 pm
  #5  
Original Member and FlyerTalk Evangelist
10 Countries Visited
20 Countries Visited
30 Countries Visited
All eyes on you!
 
Join Date: May 1998
Location: Kansas City, MO, USA
Programs: DL PM/MM, AA ExPlat, Hyatt Glob, HH Dia, National ECE, Hertz PC
Posts: 16,619
PAM! ... I'm insulted I didn't get this from you because it means I'm not in your address book
Beckles is offline  
Old Feb 12, 2001 | 4:35 pm
  #6  
Original Poster
20 Years on Site
 
Join Date: Jun 2000
Location: Manhattan, NY
Programs: USAir AA Hilton
Posts: 3,567
Beckles: Funny, that's not how the hundreds of folks who DID get it felt

I failed the stupid test twice - once for failing to reload my virus software immediately ( I had uninstalled it due to some conflicts I was having).. and twice for opening a file I knew not to open - bad day for Pamibeth.
svpii is offline  
Old Feb 12, 2001 | 4:41 pm
  #7  
25 Years on Site
 
Join Date: Apr 1999
Location: SFO
Programs: UA Million Miler (mostly earned on CO)
Posts: 2,599
terenz: Many people do not have a choice about this, as their companies force them to use Outlook or Outlook Express.
dgolds is offline  
Old Feb 12, 2001 | 5:09 pm
  #8  
Moderator, Argentina and FlyerTalk Evangelist
40 Countries Visited
2M
50 Countries Visited
25 Years on Site
 
Join Date: Aug 2000
Location: MIA / EZE
Programs: Lord of Malbec & all Wines Argentine. AA EXP / Marriott Lifetime Gold / Hyatt Explorist / Hertz PC
Posts: 36,209
Good thing I see this here... Im a sucker for Anita (SIGH) so I would definetely have fallen for this...
Gaucho100K is offline  
Old Feb 12, 2001 | 5:36 pm
  #9  
FlyerTalk Evangelist
10 Countries Visited
20 Countries Visited
 
Join Date: Nov 1999
Programs: FB PLT again afater a decade as plebian
Posts: 22,946
Don't feel too bad about getting stuck with it as there was NO virus screen available until earlier today. These things pop up faster than inoculations can be discovered and developed. An inoculation is only good for the ones that are known. At least it appears to be relatively harmless.
YVR Cockroach is offline  
Old Feb 12, 2001 | 5:59 pm
  #10  
All eyes on you!
25 Years on Site
 
Join Date: Feb 1999
Location: T82
Programs: AA Gold, HH Gold
Posts: 2,845
Same thing happened to me...got an email from someone I haven't heard from in a long time. I opened it, but so far my computer seems to be none the worse for wear. I deleted the email and the downloaded virus. I immediately called local friends who were on my email address book and told them to delete any emails from me.
Nanook is offline  
Old Feb 12, 2001 | 6:06 pm
  #11  
doc
A FlyerTalk Posting Legend
 
Join Date: May 1999
Posts: 46,817
I wouldn't feel too badly about it!

Within a few hours, the virus had managed to spread almost as rapidly as last May's ``I Love You'' virus, which caused tens of millions of dollars in damages worldwide. Anti-virus researchers expected more computer infections during Tuesday's business day in Asia.

``Everybody and their brother and sister in law (are) infected with this thing,'' said David Perry, director of public education at Trend Micro Inc. ``Last year, everybody wanted to be loved. Apparently many people want to see a JPEG (picture) of Anna Kournikova.''
http://www.nytimes.com/aponline/tech...tar-Virus.html
doc is offline  
Old Feb 12, 2001 | 8:02 pm
  #12  
In Memoriam
10 Countries Visited20 Countries Visited30 Countries Visited20 Years on Site
 
Join Date: Jun 2000
Programs: Honors Diamond, Hertz Presidents Circle, National Exec Elite
Posts: 36,111
Originally posted by terenz:
Best thing to do of course is to simply not use MS Outlook/Outlook Express or whatever mailers that run Visual Basic. I use Pegasus.
Amen to that. I've used Pegasus for years and it is much, much better than the MS products. dgolds rightly notes that some companies demand MS Outlook or OE. Maybe after such a virus wreaks havoc is the time to suggest an alternative. (I have no stake in Pegasus, just really like it. It's not without its annoyances, but it is so much better than the MS products imo).



[This message has been edited by cblaisd (edited 02-12-2001).]
cblaisd is offline  
Old Feb 12, 2001 | 8:31 pm
  #13  
 
Join Date: Dec 2000
Location: Houston, TX (HHonors Gold)
Posts: 365
This virus showed up in my home e-mail account this morning...fortunately there were also several e-mails warning against it before I could open it!
ClassicalGal is offline  
Old Feb 12, 2001 | 8:51 pm
  #14  
FlyerTalk Evangelist
10 Countries Visited
20 Countries Visited
 
Join Date: Nov 1999
Programs: FB PLT again afater a decade as plebian
Posts: 22,946
fortunately there were also several e-mails warning against it before I could open it!
If the virus writers really wanted to wreak havoc, they'd use a fake message header warning about virii.

FWIW, David Harris, the developer of Pegasus, has kept the product as freeware. He only requests you buy the manual ($20) if you find it useful. I've actually done that. Other than using Pegasus since I started using the internet at home (1995 or so), I've got no stake in it.
YVR Cockroach is offline  
Old Feb 13, 2001 | 12:54 am
  #15  
20 Years on Site
 
Join Date: May 2000
Location: Raleigh, NC USA
Posts: 290
I stupidly opened it, too, from someone who always requests a receipt..I should have known better. Let's hope it's as harmless as it seems.
RDURES1 is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.