[Date Prev][Date Next] [Chronological] [Thread] [Top]

# RE: Bill Ricke Email

- To: <support@gesn.com>
- Subject: RE: Bill Ricke Email
- From: "Bill Ricke" <billr@gesn.com>
- Date: Thu, 15 Nov 2001 11:50:54 -0600
- Importance: Normal
- In-reply-to: <C82B97F44988D411B61600D0B73EAB80CB4B@MLTSRV>

Does anyone know if Mike has been deported yet?

> -----Original Message-----
> From: owner-support@gesn.com [mailto:owner-support@gesn.com]On Behalf Of Mike Brown
> Sent: Thursday, November 15, 2001 11:14 AM
> To: support@gesn.com
> Subject: RE: Bill Ricke Email
> I still say we linch Bill for Sport:)

> > -----Original Message-----
> > From: Robert McDonald [mailto:rmcdonald@gesn.com]
> > Sent: Thursday, November 15, 2001 8:23 AM
> > To: support@gesn.com
> > Subject: Re: Bill Ricke Email
> > no "one" is sending mail using Bill's Addy. It goes a little something like this, Bill opens an attachment that he shouldn't, wrapped inside of the .exe is a virus of some sort, in this case the Magistr Worm. What this now does is infect 32 bit PE tyle files in the Windows directory and subdirectories. It will then proceed use our POP mail service to email Bill's contact list. And finally to give itself some virus security, it installs itself to run at eash system startup.
> > The code is encrypted, polymorphic and uses anti-debugging techniques to make it difficult to detect. It has been cleaned before, but for "some" reason he got it again. Dont' fret, no one is infected besides bill,,and if you are infected from Bill's email it is because you opened something you shoudln't have.
> > Thanks,
> > Robert

> > > ----- Original Message -----
> > > From: Tari Runyan
> > > To: support@gesn.com
> > > Sent: Thursday, November 15, 2001 10:14 AM
> > > Subject: Re: Bill Ricke Email
> > > so who is sending this using Bill's address????

> > > > ----- Original Message -----
> > > > From: Robert McDonald
> > > > To: support@gesn.com
> > > > Sent: Thursday, November 15, 2001 9:07 AM
> > > > Subject: Re: Bill Ricke Email
> > > > Well, the reason why it looks like a virus is because it is a virus. But the problem really is that it didn't originate from this office. So this leads me to believe that there are support people or salesmen in the field or from other offices opening emails that they shouldn't or just not paying attention to what the attachment is.
> > > > So listen, rule of thumb for viruses. DON'T OPEN ANYTHING!!! And by open, I don't mean "don't view your mail", I mean don't open an attachment, unless you are overly sure it is from someone you expected it from.
> > > > Don't open an .exe, .eml, .js, etc.
> > > > Thanks,
> > > > Robert-Quarantine Office LOL

> > > > > ----- Original Message -----
> > > > > From: Tari Runyan
> > > > > To: Support
> > > > > Sent: Thursday, November 15, 2001 10:00 AM
> > > > > Subject: Bill Ricke Email
> > > > > I have been deleting all mail from Bill as it is suspicious
> > > > > suggest we find out what is going on as it looks like viruses

- References:
  - RE: Bill Ricke Email
    - From: Mike Brown <mbrown@spectrumltd.com>

- Prev by Date: RE: Bill Ricke Email
- Next by Date: Re: à=!"# $ %
- Index(es):
  - Chronological
  - Thread