Character(s) Malware

[bottoson]

got error message... will try something else

The file is too big, maximum allowed size is 256 KB.
Your message contains too few characters.

[bottoson]

Seems that print screen copies the properties of the email as pjg and that will not go in a notepad. I am assuming that is what you want, the properties screen.

Bill Ottoson

[bottoson]

You mention that the text is a part of a joke.

I have never been able to locate or duplicate that. Could you tell me where you found it?

Bill Ottoson

[chryssi2001]

You mention that the text is a part of a joke.

I have never been able to locate or duplicate that. Could you tell me where you found it?

While you are on the sites, click on Edit/Find: At peace with Go and it will take you to that joke.

http://www.racerecon.com/forum/comments.php?DiscussionID=29&page=46
http://ijunks.blogspot.com/2008_01_01_archive.html
http://www.sikhchic.com/article-detail.php?id=406&cat=8

So, did you anytime send a joke like this at anyone?
Did you ever receive a joke like this in email?
When did this happen?
---------------------------------------------

Seems that print screen copies the properties of the email as pjg and that will not go in a notepad. I am assuming that is what you want, the properties screen.

You can change that the time you are saving it. Just open the small window, and you will see also gif, etc, you can save it also as gif.

I want to see a whole email, and those properties you say.

Go in one of the emails with the strange characters.
Click Print-Screen.
Open paint editor, or any other program you have.
Use the paint to cover your friends email address.
Try to save it as img, and submit it.
---------------------------------------------

Clicked on the message entry in outlook express for each message (one at a time), went to properties, details, message source, went to full screen, and worms were in both messages though nothing showed in the message proper.

I have OE also. Tried to reproduce this but looks like i can't see properties.
---------------------------------------------
I want you to try something.

In OE go on Help Tab.
You will find a Detect and Repair function.
Click on it, let the default tick like it is, and click on Start.
When it finishes, close and re-open OE.

Delete all your received emails but one.
Empty Deleted Items Folder.

Click on the remaining email, and reply.
Clean that strange text, and send it to yourself.
Tell me if you got the strange text.

Also send it the same way to your friend, and tell him to send it back to you with the reply button, the same way.
Still the strange text there?
---------------------------------------------

Seems that print screen copies the properties of the email as pjg and that will not go in a notepad. I am assuming that is what you want, the properties screen.

It should be jpg, and not pjg.

Please try to post a screnshoot, of the properties, and of an email, so i can understand what we are talking about.

[bottoson]

Know of no way to make a screen shot of the WC's without it ending up as a jpg file and too big to be acceptable by your site, and not acceptable in Notepad.

Still getting WC's at bottom of html emails.

Suggestions welcome

Bill Ottoson

[chryssi2001]

The jpg image you posted here looks ok.
viewtopic.php?p=334954#p334954

Some suggestions in my previous post.
Did you try them?

Please try to take a screenshot.
If not copy the contents of the email plus the worm text.
I need to know how it looks, and what is it.

As i said no malware shows, so there must be something else creating it.

[bottoson]

Here is a file containing what I call the Worm Characters.

Bill Ottoson

[bottoson]

The picture I sent is the replaced characters that are fitted on the bottom of all my html emails.

The characters are also showing up in more and more places such as instructions from different sites and sometimes if I need to fill in the blanks etc the worm characters appear instead of the text typed characters. I have not been able to discern any pattern to when they appear or don't appear.

I am going to review all of your latest request and attempt to fill them.

Bill Ottoson

[bottoson]

It should be jpg, and not pjg.

I think I was tired and typing with crosseyed fingers.

And I don't know how to add the smiles to this post.

Bill Ottoson

[bottoson]

By darn I do know how to add the smiles.

--------------------------------------

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.138 / Virus Database: 270.6.1/1608 - Release Date: 8/12/2008 4:59 PM

The above lines are the ones that are replaced in the emails. I am sure that you have noticed that already, but I just wondered, is it possible that the problem lies somewhere in AVG software, perhaps something was added that causes the translation, but is not being picked up by the scanning.

Just a thought.

Bill Ottoson

[chryssi2001]

Yes you can add smilies

Please change your email setting to Plain text and tell me if those strange characters appear.
Where is the part of the joke appears?

Additionally go in your Control Panel, Regional settings.
Post back what exactly are your settings in each tab there.
----------------------------------------------
Run this tool also and post back the report.

BLACKLIGHT

• Please download F-Secure Blacklight (fsbl.exe) from here
• Save into C:\ with a name of fsbl.exe
• Go to Start > Run
• Copy and paste the contents of the below codebox into the run box
  

  Code: Select all

  C:\fsbl.exe /expert

• Click OK
• This will launch BlackLight
• Select I accept the agreement
• Click Next
• Click Scan
• Wait for the scan to finish
• Click on Next>
• Click Exit
• A logfile will have been created in the C:\ drive
• It will be named fsbl-xxxxxxxxxxxxxx.log where xxxxxxxxxxxxxx is the date and time of the scan
• Use notepad to open that log
• Post the contents of that log as a reply to this topic together with a new HijackThis log.

[bottoson]

With all to the messages being read in text the strange characters are no longer present.

Where is the part of the joke appears?

Don't understand this sentence. I haven't had a chance to locate the joke per your instructions. Will do shortly. And follow throught with your other instructions. But please explain the above sentence to me.

Bill Ottoson

[bottoson]

Regional entries

English
123,456,789.00
$123,456,789.00
10:25:26pm
8/14/2008
Thursday August 14, 2008
United States

Bill Ottoson

[chryssi2001]

Read carefully all my post, and try to answer each part, and do what i asked. Looks like you are leaving steps behind.

Firstly......

Did you change your email settings to Plain Text?

With all to the messages being read in text the strange characters are no longer present.

I can't understand this too. You can't see the strange characters any longer?
Did you change anything?
If you can't see them anymore do not follow all the steps below, but just tell me for the joke.

Do you still see the joke? This one.

At peace with Go
An 80-year-old man went for a physical. All of his tests come back with
normal results. The doctor
said, "George, everything looks great. How
are you doing mentally and emotionally? Are you at peace with God?"
George replied,

If not what did you do and it dissappeared?

The above lines are the ones that are replaced in the emails. I am sure that you have noticed that already, but I just wondered, is it possible that the problem lies somewhere in AVG software, perhaps something was added that causes the translation, but is not being picked up by the scanning.

Another thought. Maybe AVG can't read HTML? Did you change any settings in AVG?

Please tell me what is in your Regional Settings, Advanced tab, code page conversion tables.

From a previous post of mine:
Please follow the steps.

I want you to try something.

In OE go on Help Tab.
You will find a Detect and Repair function.
Click on it, let the default tick like it is, and click on Start.
When it finishes, close and re-open OE.

Delete all your received emails but one.
Empty Deleted Items Folder.

Click on the remaining email, and reply.
Clean that strange text, and send it to yourself.
Tell me if you got the strange text.

Also send it the same way to your friend, and tell him to send it back to you with the reply button, the same way.
Still the strange text there?

viewtopic.php?p=336160#p336160
You missed running BLACKLIGHT, as per my instructions in the above post.

I want you to uninstall AVG.
Firstly go to AVG site and download the installed.
Disconnect your pc from the Internet.
Uninstall AVG.
Reinstall AVG.
Go online and see your emails again.

Please tell me if you still have the symptoms.

I've pmd you also.

[bottoson]

I will make every attempt to get caught up today with your instructions.

But first...

I received this email this morning. I did not follow the instructions. Please respond as to whether this is legitamate or not.

--------------------------------------------------

Hello bottoson,

You have received a new private message from "chryssi2001" to your account
on "MalWare Removal" with the following subject:

Re: your emails text

You can view your new message by clicking on the following link:

ucp.php?i=pm&folder=inbox

You have requested that you be notified on this event, remember that you
can always choose not to be notified of new messages by changing the
appropriate setting in your profile.

--
PLEASE DO NOT REPLY TO THIS EMAIL - this email address is only used to send
out emails from the forum, all incoming emails are auto deleted and never
seen by any human.

Thanks, The Management of MalwareRemoval.com

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.138 / Virus Database: 270.6.3/1612 - Release Date: 8/14/2008 6:03 PM


Bill Ottoson