Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old February 11th, 2002, 10:08 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,511
Default Another noob ??

Anyway all my little newbie Q's will keep all you guru's a little busy anyway hehehe...

So once upon a time I was told by someone that making the first address in my address book something like 0000000000aaaaaaaaa *and this would disable the process of lots of auto-mailing viruses because the virus would stop after finding an invalid email addy...

So is this true or is my first address book entry useless?


__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #2  
Old February 11th, 2002, 10:19 PM
javacool javacool is offline
Javacool Moderator
 
Join Date: Feb 2002
Posts: 3,656
Default Re: Another noob ??

I have gotten reports of both this working, and it being useless...

But I dont see how it can hurt...


Enjoy! *

P.S. The only instance I can think of this working would be a virus that just takes the first entry in your address book - but with the way viruses are these days, I'd say that's rather unlikely. *:-/
__________________

*Official Javacool Software Website*
*SpywareBlaster*

*Please note: I am not responsible if any advice herein causes any trouble whatsoever *
  #3  
Old February 11th, 2002, 10:23 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,383
Default Re: Another noob ??

In essence, useless. Depending on the infection, info will be gathered at random from an address book, user.dat files etc.

regards.

paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #4  
Old February 11th, 2002, 10:28 PM
JPM JPM is offline
Regular Poster
 
Join Date: Feb 2002
Location: Las Vegas, NV
Posts: 72
Default Re: Another noob ??

To the best of my knowledge this is not valid. I have heard this before and read a number of answers to the same question and it always ends the same, this does not even slow them down much less stop them. Many mass mailing viruses/worms select addresses at random out of the address book. The ones that don't go at random just keep moving on down the list, seems they don't stop to check for the address being valid or not they just mail away *
__________________
You laugh because I'm different, I laugh because your all the same.
  #5  
Old February 12th, 2002, 12:41 AM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,511
Default Re: Another noob ??

Thnx for the replies and the "Enjoy" *hehehe

Well good to know for sure, but I'll leave it in there cause if I delete it I'm sure to be infected tomorrow with some rare virus that would have been stopped by the stupid address entry *
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #6  
Old February 12th, 2002, 05:04 PM
Zhen-Xjell's Avatar
Zhen-Xjell Zhen-Xjell is offline
Security Expert
 
Join Date: Feb 2002
Location: Ohio
Posts: 1,397
Default Re: Another noob ??

0000 trick (or !0000 trick) to confuse viruses/worms
__________________
Microsoft MVP Windows-Security
Submit Phish: www.castlecops.com/pirt
CastleCops [de] [en] [wiki]
  #7  
Old February 12th, 2002, 07:20 PM
javacool javacool is offline
Javacool Moderator
 
Join Date: Feb 2002
Posts: 3,656
Default Re: Another noob ??

Quote:
Thnx for the replies and the "Enjoy" *hehehe

Well good to know for sure, but I'll leave it in there cause if I delete it I'm sure to be infected tomorrow with some rare virus that would have been stopped by the stupid address entry *

Always possible...lol

I've seen many a stupid thing stop viruses on PCs (including, in one case, a botched version of Microsoft Windows).

Enjoy! *


Enjoy! *
__________________

*Official Javacool Software Website*
*SpywareBlaster*

*Please note: I am not responsible if any advice herein causes any trouble whatsoever *
  #8  
Old February 16th, 2002, 04:01 PM
javacool javacool is offline
Javacool Moderator
 
Join Date: Feb 2002
Posts: 3,656
Default Re: Another noob ??

Here's Symantec's spin on the whole "!00000" address entry "theory":

http://securityresponse.symantec.com...ook.entry.html

Quote:
Although this is technically not a hoax--in theory, it could work with a few older worms and viruses--Symantec Security Response strongly recommends that you ignore it.

See the page for the full write-up.


Enjoy! *
__________________

*Official Javacool Software Website*
*SpywareBlaster*

*Please note: I am not responsible if any advice herein causes any trouble whatsoever *
  #9  
Old February 17th, 2002, 03:54 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,511
Default Re: Another noob ??

thanks! I enjoyed ;-)
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 12:22 AM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums