Cable Forum - [Merged] EMail "Virus" from ntl

Cable Forum

Page 6 of 7

6

Show 100 post(s) from this thread on one page

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - [Merged] EMail "Virus" from ntl (https://www.cableforum.uk/board/showthread.php?t=11851)

Paul	19-04-2004 21:23

Re: [Merged] E-mail from NTL - possible virus

Quote:

Originally Posted by Womble

Pem, you asked me to post the contents, do you mean the properties?. If so they are as follows;

Actually no, I meant the actual text content of the message, but the other information you posted may be useful. :)

Womble

19-04-2004 21:44

Re: [Merged] E-mail from NTL - possible virus

this is the content

What a Cracker Aye!!

--------------------------------------------------------------------------------

zaax	19-04-2004 23:50

Viruses from NTL customers

http://www.spamhaus.org/sbl/listings.lasso?isp=ntl.com

hairy_mick

21-04-2004 18:04

Re: [Merged] E-mail from NTL - possible virus

This Message was undeliverable due to the following reason:

The user(s) account is temporarily over quota.

<peri@ntlworld.com>

Please reply to Postmaster@ntlworld.com
if you feel this message to be in error.

just received this today and its got an attachment. What do you think

paulyoung666

21-04-2004 18:07

Re: [Merged] E-mail from NTL - possible virus

Quote:

Originally Posted by hairy_mick

This Message was undeliverable due to the following reason:

The user(s) account is temporarily over quota.

<peri@ntlworld.com>

Please reply to Postmaster@ntlworld.com
if you feel this message to be in error.

just received this today and its got an attachment. What do you think

is it someone you have sent an e-mail to ??????????? , do you know that user ???????????? , if you dont then have you checked to see if you have a virus ??????????? , if you havent then just bin it :)

iadom

21-04-2004 18:17

Re: [Merged] E-mail from NTL - possible virus

Quote:

Originally Posted by hairy_mick

This Message was undeliverable due to the following reason:

The user(s) account is temporarily over quota.

<peri@ntlworld.com>

Please reply to Postmaster@ntlworld.com
if you feel this message to be in error.

just received this today and its got an attachment. What do you think

I am getting more "undeliverable" returned emails that I have not actually sent than spam at the moment. Some have attachments and some have been stripped by the returning ISP. As Paulyoung666 says, bin it and scan your system.

hairy_mick

21-04-2004 18:17

Re: [Merged] E-mail from NTL - possible virus

Hi paulyoung666 funny but the 2 files in the attachment are a dat file 170 bytes and a file something for you 22.8Kb i have another which says open immediately not ***king likely.

paulyoung666

21-04-2004 18:20

Re: [Merged] E-mail from NTL - possible virus

Quote:

Originally Posted by hairy_mick

Hi paulyoung666 funny but the 2 files in the attachment are a dat file 170 bytes and a file something for you 22.8Kb i have another which says open immediately not ***king likely.

good move , do a virus scan on your computer just to make sure :)

hairy_mick

21-04-2004 18:21

Re: [Merged] E-mail from NTL - possible virus

the other just says "thats wrong" and the attachment bill.exe 22KB sounds like a virus to me

paulyoung666

21-04-2004 18:23

Re: [Merged] E-mail from NTL - possible virus

Quote:

Originally Posted by hairy_mick

the other just says "thats wrong" and the attachment bill.exe 22KB sounds like a virus to me

most likely is :mad:

Flubflow

27-04-2004 11:28

Virus(?) "from" NTL

Got this in my inbox today.....

Quote:

Return-Path: <ArtHammy@aol.com>
Received: from your-s7bogap9pv ([217.43.184.13]) by mta04-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with SMTP
id <20040427072934.CBNO5565.mta04-svc.ntlworld.com@your-s7bogap9pv>
for <xxxxxxxx@ntlworld.com>; Tue, 27 Apr 2004 08:29:34 +0100
Date: Tue, 27 Apr 2004 08:37:37 +0000
To: xxxxxxxx@ntlworld.com
Subject: Important notify about your e-mail account.
From: management@ntlworld.com
Message-ID: <kmaewnaakcesokrutok@ntlworld.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------yymormdaukyjmukokseb"

----------yymormdaukyjmukokseb
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Dear user, the management of Ntlworld.com mailing system wants to let you know that,

Our antivirus software has detected a large ammount of viruses outgoing
from your email account, you may use our free anti-virus tool to clean up
your computer software.

Further details can be obtained from attached file.

In order to read the attach you have to use the following password: 37442.

The Management,
The Ntlworld.com team http://www.ntlworld.com

----------yymormdaukyjmukokseb
Content-Type: application/octet-stream; name="Info.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Info.zip"

The zip file contains an EXE. Dunno what it was and I was not going to try and find out.
The sender IP traces to btbroadband.com and their abuse dept has been informed.
Watch out peeps.

Chris

27-04-2004 11:31

Re: Virus(?) "from" NTL

Quote:

Originally Posted by Flubflow

Got this in my inbox today.....

The zip file contains an EXE. Dunno what it was and I was not going to try and find out.
The sender IP traces to btbroadband.com and their abuse dept has been informed.
Watch out peeps.

Dodgy as hell, the .exe file installs a virus (can't remember which). It's hidden in a password-protected zip file to try and fool virus scanners. Already being discussed in another thread somewhere round here ... :)

Nemesis

27-04-2004 11:33

Re: Virus(?) "from" NTL

/sits and waits for Towny to find it ...

Stuartbe

27-04-2004 11:34

Re: Virus(?) "from" NTL

http://www.cableforum.co.uk/board/showthread.php?t=8779 :D

Chris

27-04-2004 11:35

Re: Virus(?) "from" NTL

Quote:

Originally Posted by Nemesis

/sits and waits for Towny to find it ...

http://www.cableforum.co.uk/board/showthread.php?t=8779

/Sits and waits for a mod to close the thread ... :D

edit
Darn, beaten to it by goldenballs :rofl:

All times are GMT. The time now is 23:13.

Page 6 of 7

6

Show 100 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum