Illegal Web Sites? What the...?

Bobby Lee · Post by **Bobby Lee** » 24 Feb 2005 9:18 am

I received this email for the first time today. Research shows that the attached ZIP file is actually the sober.k virus. Never open attachments, even if they say they are from the FBI!! <BLOCKQUOTE>quote:<HR>From: police@fbi.gov
To: quasar@b0b.com
CC:
Subject: You visit illegal websites
Date: Thu, 24 Feb 2005 16:04:52 UTC
---------------------------------------------

Dear Sir/Madam,

we have logged your IP-address on more than 40 illegal Websites.

Important: Please answer our questions!
The list of questions are attached.

Yours faithfully,
M. John Stellford

++-++ Federal Bureau of Investigation -FBI-
++-++ 935 Pennsylvania Avenue, NW, Room 2130
++-++ Washington, DC 20535
++-++ (202) 324-3000

--------------------------------------------
Content-Type: application/octet-stream; name=indictment_cit8148.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=indictment_cit8148.zip
<HR></BLOCKQUOTE> As if! The FBI does not send unsolicited emails, of course. They have issued a press release about this one. Don't open the ZIP file.

------------------
<img align=right src="http://b0b.com/Hotb0b.gif" width="96 height="96">Bobby Lee - email: quasar@b0b.com - gigs - CDs, Open Hearts
Sierra SD-12 (Ext E9), Williams D-12 Crossover, Sierra S-12 (F Diatonic)
Sierra Laptop 8 (E6add9), Fender Stringmaster (E13, C6, A6)

CrowBear Schmitt · Post by **CrowBear Schmitt** » 24 Feb 2005 10:09 am

the horror never stops

Al Marcus · Post by **Al Marcus** » 24 Feb 2005 10:59 am

Thanks Bobby- What motivates these people to do this?.....al

Bill Bosler · Post by **Bill Bosler** » 24 Feb 2005 6:46 pm

Gee! An e-mailed indictment! Now THAT'S progress.

Jon Light (deceased) · Post by **Jon Light (deceased)** » 24 Feb 2005 9:11 pm

That's what you get for looking at those pictures of J. Edgar in a dress, b0b. The Gmen are pretty humorless about that.

Peter · Post by **Peter** » 25 Feb 2005 5:17 am

I looked at a picture of Howard in a dress.
Will I get a zipfile now?

Bobby Lee · Post by **Bobby Lee** » 25 Feb 2005 10:21 am

Here's another infection email that came today: <BLOCKQUOTE>quote:<HR>From: security@microsoft.com
To: quasar@b0b.com
CC:
Subject: Alert! New Sober Worm!
Date: Fri, 25 Feb 2005 11:38:05 UTC
--------------------------------------------

ATTENTION!

Antivirus vendors are warning of a new variant of the "Sober" virus
discovered today that can delete the hard disk.

Protection:
Download and read the zipped patch. It's very easy to install!

Thanks for your cooperation!

--- (c)2005 Microsoft Corporation. All rights reserved
--- Microsoft Corporation
--- One Microsoft Way
--- Redmond, Washington 98052-6399

*-* Mail-Scanner: No Virus detected
*-* "B0B" Anti-Virus Service
*-* http://www.b0b.com

--------------------------------------------
patch_help-text.zip <HR></BLOCKQUOTE> Of course, Microsoft doesn't use email to distribute patches. The ZIP file is the virus.

I thought that the "B0B" Anti-Virus Service line was an interesting touch. There's no such thing - I should know!

------------------
<img align=right src="http://b0b.com/Hotb0b.gif" width="96 height="96">Bobby Lee - email: quasar@b0b.com - gigs - CDs, Open Hearts
Sierra SD-12 (Ext E9), Williams D-12 Crossover, Sierra S-12 (F Diatonic)
Sierra Laptop 8 (E6add9), Fender Stringmaster (E13, C6, A6)

Tony Palmer · Post by **Tony Palmer** » 4 Mar 2005 7:24 am

So what exactly might happen if we were to accidentally open one of these virus links AND we had a typical McAvee anti-virus program installed?
Is there reason to fear these stupid things so much?
Doesn't normal anti-virus software work?

Ray Minich · Post by **Ray Minich** » 4 Mar 2005 7:36 am

<BLOCKQUOTE>quote:<HR>From: police@fbi.gov
To: quasar@b0b.com
CC:
Subject: Updated information req'd
Date: Thu, 24 Feb 2005 16:04:52 UTC

Dear Sir:

We are in need of updated information for our surveillance files in Washington DC. Please provide current dossier.

Warmest Regards,
Your Friends at the FBI
<HR></BLOCKQUOTE>

About as likely...

[This message was edited by Ray Minich on 04 March 2005 at 07:37 AM.]

Bobby Lee · Post by **Bobby Lee** » 4 Mar 2005 4:39 pm

Tony, the problem with anti-virus programs is that they only protect you from the things that they know about. If you're sure that you're 100% up-to-date with virus protection and you're feeling real lucky, go ahead and try it. I wouldn't, but then I don't play the lottery either.