You have the klez virus!

MonsieurEvilMonsieurEvil Join Date: 2002-01-22 Member: 4Members, Retired Developer, NS1 Playtester, Contributor
<div class="IPBDescription">Yes you, mr. 66.31.27.173 ns fan</div>Ok,

After spending several fruitless emails talking to the crapbrains at AT&T Northeast Broadband, I am trying a different tact:

If you have this IP address - <b>66.31.27.173</b>

<span style='color:red'>YOU ARE INFECTED WITH THE KLEZ VIRUS!</span>

Yes, you! Your infected machine is spamming the various RR.org mailboxes with false emails trying to propogate itself. You also have a few other viruses as well, but KLez is what's annoying <i>every person you have ever emailed or saved an address to</i>.

To determine your IP address -

(Win95/Win98/WinME): Click Start | Run | type 'winipcfg' (no quotes) . Your IP will be listed in the dialog.

(WinNT/Win2000/WinXP): Click Start | Run |type 'cmd' (no quotes). Then in the command session that opens, type 'ipconfig' . That will list your IP address.

If you are this IP address, you desperately need to get your machine cleaned of viruses. You are damaging your data and spamming everyone you've ever vaguely known. There are plenty of free virus scanning solutions, and I recommend you get a fulltime one. Feel free to PM me if you're the one - I will be totally discreet.



<!--EDIT|MonsieurEvil|Aug. 22 2002,20:55-->

Comments

  • VangorVangor Join Date: 2002-05-22 Member: 655Members
    It's good someone is looking out for people. I'm happy to say though that mine is 65.35.96.223, so it's not me.
  • Sgt_XSgt_X Join Date: 2002-03-01 Member: 261Members
    I think it had more to do with the fact that it was burying all the legit mail and threataning to fill the mail servers HD.
  • JasonBostwickJasonBostwick Blossom Join Date: 2002-04-14 Member: 444Members, NS1 Playtester
    Mmm, glad that isn't me.


    ... especially since I don't currently have an active virus scanner.
  • Sgt_XSgt_X Join Date: 2002-03-01 Member: 261Members
    <a href="http://www.grisoft.com/html/us_index.htm?session=ca99dd2a09961f7889af39147fe483f5" target="_blank">AVG</a> is a free virus scanner, might as well get it if you've got nothing else.
  • the_stalkerthe_stalker Join Date: 2002-01-25 Member: 49Members
    woohoo, i dont got a virus nope <!--emo&:D--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/biggrin.gif" border="0" valign="absmiddle" alt=':D'><!--endemo-->
    /me sits and stairs at his computer  :|
  • KhaimKhaim Join Date: 2002-06-28 Member: 841Members, NS1 Playtester, Constellation
    FEAR ME! j/k not me either <!--emo&:D--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/biggrin.gif" border="0" valign="absmiddle" alt=':D'><!--endemo-->
    ----------
    ok that was spamming ;D
  • BattousaixBattousaix Join Date: 2002-06-25 Member: 822Members
    ITS ME ITS ME <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->.... not
    my ip is:24.232 etc etc....... guys dont post ur complete ip or u might get whacked by a hacker =/
  • CollateralDamageCollateralDamage Join Date: 2002-07-15 Member: 949Members
    Best way to protect against mail worms: Get rid of Outlook.
  • GuardastaGuardasta Join Date: 2002-08-04 Member: 1064Members
    so does that mean my email was lost somewhere MonsE?

    i sent an application for hosting....
  • GwahirGwahir Join Date: 2002-04-24 Member: 513Members, Constellation
    btw, monse, that neglects in home/business routers.  In that case you will need to discover the router's public side ip.
  • InsaneInsane Anomaly Join Date: 2002-05-13 Member: 605Members, Super Administrators, Forum Admins, NS1 Playtester, Forum Moderators, NS2 Developer, Constellation, NS2 Playtester, Squad Five Blue, NS2 Map Tester, Subnautica Developer, Pistachionauts, Future Perfect Developer
    Well that's not the IP of the computer I'm on right now, but I'll have to wait two weeks to check my one at home.  I seriously doubt that my home PC has it, though.
  • the_stalkerthe_stalker Join Date: 2002-01-25 Member: 49Members
    <!--QuoteBegin--Battousai^^x+Aug. 23 2002,00:20--></span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td><b>Quote</b> (Battousai^^x @ Aug. 23 2002,00:20)</td></tr><tr><td id="QUOTE"><!--QuoteEBegin-->ITS ME ITS ME <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->.... not
    my ip is:24.232 etc etc....... guys dont post ur complete ip or u might get whacked by a hacker =/<!--QuoteEnd--></td></tr></table><span id='postcolor'><!--QuoteEEnd-->
    hahaha, thats what i was going to tell you until i read "guys dont post ur complete ip or u might get whacked by a hacker"  <!--emo&;)--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/wink.gif" border="0" valign="absmiddle" alt=';)'><!--endemo-->
  • BiomechanoidBiomechanoid Join Date: 2002-02-12 Member: 203Members
    actually.... I think it's someplace close to me...

    my ip is 66.31.26.253

    but i'm not worried 'bout hackers. I'm on 56k dial up with a firewall...

    you can hack... but it'll take 5 hours to get a response, I get disconnected about every hour, and... everytime I reconnect I get a new IP <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->
  • GwahirGwahir Join Date: 2002-04-24 Member: 513Members, Constellation
    hmmmm MonsE, does the ip change at all, with this last update, chances of the account being a dial-up increase drastically...
  • KadrealKadreal Join Date: 2002-06-28 Member: 837Members
    well it's a type A address so even if it's dynamic the first number should remain 66..... which means it could be biomechaniod...
  • FreemantleFreemantle Join Date: 2002-06-16 Member: 783Members
    24.247.55.85 W00t not me. I would lknow if i was infected anyway.
  • GwahirGwahir Join Date: 2002-04-24 Member: 513Members, Constellation
    well, when I did tech support, those on dial up where normally static in the first 3 numbers, though maybe it was only the first 2...
  • MonsieurEvilMonsieurEvil Join Date: 2002-01-22 Member: 4Members, Retired Developer, NS1 Playtester, Contributor
    The address does not change. It is likely a static address, but there's the possibility that the DHCP leases are set to very long durations or to try and renew on the same MAC address if possible.

    Either way, it's not very relevant to the issue.



    <!--EDIT|MonsieurEvil|Aug. 23 2002,15:22-->
  • LegionnairedLegionnaired Join Date: 2002-04-30 Member: 552Members, Constellation
    It's not working now...

    C:\WINDOWS\Profiles\Alex\Desktop>ping 66.31.27.173

    Pinging 66.31.27.173 with 32 bytes of data:

    Request timed out.
    Request timed out.
    Request timed out.
    Request timed out.

    Ping statistics for 66.31.27.173:
       Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
    Approximate round trip times in milli-seconds:
       Minimum = 0ms, Maximum =  0ms, Average =  0ms

    C:\WINDOWS\Profiles\Alex\Desktop>

    So, it's dynamic i guess.
  • BananBanan Join Date: 2002-02-22 Member: 235Members
    Well that was weird, appearantly my ip is 255.255.255.0 <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->
    well thats what ipconfig said but I know my ip is acctually 80.202 something (not telling the rest <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->)
  • MonsieurEvilMonsieurEvil Join Date: 2002-01-22 Member: 4Members, Retired Developer, NS1 Playtester, Contributor
    255.255.255.0 is your subnet mask, not your IP address.
  • ChromeAngelChromeAngel Join Date: 2002-01-24 Member: 14Members, NS1 Playtester, Contributor
    This probably doesn't help but that's the IP address for an AT&T broadband client.

    <a href="http://remote.12dt.com/rns/" target="_blank">Mmmm... Reverse DNS Lookup</a>
  • MonsieurEvilMonsieurEvil Join Date: 2002-01-22 Member: 4Members, Retired Developer, NS1 Playtester, Contributor
    Chrome, this is why I spent several emails talking to AT&T Broadband Abuse and Support departments, and noted this in my inital post. You do know what I do for a living right?

    I'd really just prefer to hear from the offending party. Where are you mister Klez?



    <!--EDIT|MonsieurEvil|Aug. 23 2002,17:45-->
  • BananBanan Join Date: 2002-02-22 Member: 235Members
    <!--QuoteBegin--MonsieurEvil+Aug. 23 2002,16:16--></span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td><b>Quote</b> (MonsieurEvil @ Aug. 23 2002,16:16)</td></tr><tr><td id="QUOTE"><!--QuoteEBegin-->255.255.255.0 is your subnet mask, not your IP address.<!--QuoteEnd--></td></tr></table><span id='postcolor'><!--QuoteEEnd-->
    I know <!--emo&:p--><img src="http://www.natural-selection.org/iB_html/non-cgi/emoticons/tounge.gif" border="0" valign="absmiddle" alt=':p'><!--endemo-->
    The meaning was acctually to point out that not everybody can get their ip that way (well under ip it's 10.0.0.3 so that's not any better, stupid gateway)
    Aaanyways just wanted to clear that out.
  • ChromeAngelChromeAngel Join Date: 2002-01-24 Member: 14Members, NS1 Playtester, Contributor
    Sorry Mr E must have missed that while I was scanning for the meat of the post.  Just trying to help.

    The links not really inteded for Monsieur Evil, but for folks that want to find out who owns a particular IP address and aren't as technical...
  • GwahirGwahir Join Date: 2002-04-24 Member: 513Members, Constellation
    confirmed, not me, btw.
Sign In or Register to comment.