mass email - program or virus?

My son sent a network wide email at school (600+) from
him to each person individually with the text "ha ha
loser".

The school is on a wireless network and all students have
laptop.

His version is that he got an e mail that the subject
matter was windows upgrade. Message was something
like "please open following attachment to open windows".
He did, it open a zip file, he unziped and it ran
something called "net send". A program popped up, froze
his options to click on something close to "bomb send
infinite"

My question is does this sound familiar/similiar to
anything? I'm searching for a virus but he could of
downloaded a program on purpose just as well. I'm just
not sure.

Let me know any thoughts.

Jim

Jim wrote:
> My son sent a network wide email at school (600+) from
> him to each person individually with the text "ha ha
> loser".
>
> The school is on a wireless network and all students have
> laptop.
>
> His version is that he got an e mail that the subject
> matter was windows upgrade. Message was something
> like "please open following attachment to open windows".
> He did, it open a zip file, he unziped and it ran
> something called "net send". A program popped up, froze
> his options to click on something close to "bomb send
> infinite"
>
> My question is does this sound familiar/similiar to
> anything? I'm searching for a virus but he could of
> downloaded a program on purpose just as well. I'm just
> not sure.
>
> Let me know any thoughts.

If he had 600+ people in his contact list - yes - a virus could have sent
the email from him to those 600+ people.

--
<- Shenan ->
--

If the machine was in a domain environment, and the machines
in the domain have the messenger service running (as they seem
to have by your message)
then all he would have needed to do was, at a cmd prompt entered
net send /domain ha ha loser
or for that matter, in a workgroup the following could have been used
net send * ha ha loser

It is very conceivable that someone sent something to him
that tricked him into executing this command. It is also
conceivable that he "discovered" that messenger service
was running on all the machines so he could net send to them.

At a cmd prompt enter
net help send
for info on the command syntax
"Jim" <anonymous@discussions.microsoft.com> wrote in message
news:1f6b01c3e083$36857780$a001280a@phx.gbl...
> My son sent a network wide email at school (600+) from
> him to each person individually with the text "ha ha
> loser".
>
> The school is on a wireless network and all students have
> laptop.
>
> His version is that he got an e mail that the subject
> matter was windows upgrade. Message was something
> like "please open following attachment to open windows".
> He did, it open a zip file, he unziped and it ran
> something called "net send". A program popped up, froze
> his options to click on something close to "bomb send
> infinite"
>
> My question is does this sound familiar/similiar to
> anything? I'm searching for a virus but he could of
> downloaded a program on purpose just as well. I'm just
> not sure.
>
> Let me know any thoughts.
>
> Jim

Yes, it's definitely possible.

"Jim" <anonymous@discussions.microsoft.com> wrote in message
news:1f6b01c3e083$36857780$a001280a@phx.gbl...
> My son sent a network wide email at school (600+) from
> him to each person individually with the text "ha ha
> loser".
>
> The school is on a wireless network and all students have
> laptop.
>
> His version is that he got an e mail that the subject
> matter was windows upgrade. Message was something
> like "please open following attachment to open windows".
> He did, it open a zip file, he unziped and it ran
> something called "net send". A program popped up, froze
> his options to click on something close to "bomb send
> infinite"
>
> My question is does this sound familiar/similiar to
> anything? I'm searching for a virus but he could of
> downloaded a program on purpose just as well. I'm just
> not sure.
>
> Let me know any thoughts.
>
> Jim