Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)
-   -   [Merged] EMail "Virus" from ntl (https://www.cableforum.uk/board/showthread.php?t=11851)

highlandlassie 03-03-2004 08:38

Email from NTL - possible virus
 
Morning everyone - new here so hope I have posted in the correct thread:wavey:

Hi - I received an email from noreply@ntlworld.com - with an attachmnet and subject heading - warning you have a virus on your computer. I was in 2 minds on whether to open or not - deleted the email - but to be safe incase the email was genuine - I phoned tech dept - they advised that it was a virus, and they don't send emails with attachments - just curious if anyone else has received this type of email.

Before i phoned - i ran the following - trend micro, Nortons, adaware, spybot S&D, spyblaster - also have mailwasher - all came up clean

timewarrior2001 03-03-2004 08:43

Re: Email from NTL - possible virus
 
Good Morning welcome to Nthellworld.
I personally have not received any such email, but where I work we have been getting a lot of reports of it.

I dont think its sepcific to NTL, I am certain the address will be spoofed.

The good part of it is that you were switched on enough to realise th epossible dangers and took appropriate action.

rdhw 03-03-2004 09:39

Re: Email from NTL - possible virus
 
Quote:

Originally Posted by highlandlassie
Hi - I received an email from noreply@ntlworld.com - with an attachmnet and subject heading - warning you have a virus on your computer.

This is a virus worm: bagle.j. It will be detected by NAI's 4332 DAT file when it is released.

highlandlassie 03-03-2004 09:59

Re: Email from NTL - possible virus
 
Quote:

Originally Posted by rdhw
This is a virus worm: bagle.j. It will be detected by NAI's 4332 DAT file when it is released.

deleted anyway - thank goodness for mailwasher - thanks for your replies

LynneC 03-03-2004 12:17

Ntl sending viruses!
 
I got an email from ntlworld this morning, saying there had been complaints from some people about the spam emanating from my account. I was a tad surprised, since I'm very careful to protect my computer from invasion, but I have been away and perhaps the children had let something through.
The attachment was password protected. I opened it. (oh dear!)
The worm bagel was in the attachment. Since I was suspicious the first thing I did after opening the thing was to update and run my antivirus (something I do at least once a day). It cleaned out the problem. I'll goto Trend and check that everything has gone after this.
So beware - don't open the exe file ntl sends you! I've sent a copy of the email to support at ntl. Is there anywhere else I should send it?

timewarrior2001 03-03-2004 12:23

Re: Ntl sending viruses!
 
I'll gaurantee you the email wasnt from NTL.
Seems this virus is being spread through spoofing email address's. We have been getting hit with it at work, looks like your mates/colleagues are sending you a file or something and its the virus.

Stuartbe 03-03-2004 12:23

Re: Ntl sending viruses!
 
Quote:

Originally Posted by LynneC
I got an email from ntlworld this morning, saying there had been complaints from some people about the spam emanating from my account. I was a tad surprised, since I'm very careful to protect my computer from invasion, but I have been away and perhaps the children had let something through.
The attachment was password protected. I opened it. (oh dear!)
The worm bagel was in the attachment. Since I was suspicious the first thing I did after opening the thing was to update and run my antivirus (something I do at least once a day). It cleaned out the problem. I'll goto Trend and check that everything has gone after this.
So beware - don't open the exe file ntl sends you! I've sent a copy of the email to support at ntl. Is there anywhere else I should send it?

This virus was not sent by NTL. It is spoofing the NTL address to make it apear that way.

Have a look at this thread - http://forum.nthellworld.co.uk/showt...088#post157088#

Oh and :welcome: to the site BTW :D

threadbare 03-03-2004 12:24

Re: Ntl sending viruses!
 
ntl are most certainly not sending this

the email address is spoofed

don't send it anywhere!

Alanmelon 03-03-2004 12:24

Re: Ntl sending viruses!
 
Just wondered - what was the nature of the exe, and what did it propose to do?
I think it's very unlikely this came from ntl. Its fair to say - you've been 'ad.

br3ach 03-03-2004 12:26

Re: Ntl sending viruses!
 
Dont open attachments unless they are something from a known address that you were expecting to recieve.

No probs.

And as said above, the email is unlikely to have originated from NTL. You can post the headers of the email here, and we'll see if we can figure where it came from.

Good luck getting rid off it :)

timewarrior2001 03-03-2004 12:28

Re: Ntl sending viruses!
 
Quote:

Originally Posted by Kedoo
Dont open attachments unless they are something from a known address that you were expecting to recieve.

No probs.

And as said above, the email is unlikely to have originated from NTL. You can post the headers of the email here, and we'll see if we can figure where it came from.

Good luck getting rid off it :)

OK ok guys I think we have now firmly established the fact NTL did not send this lol.

What I would like to know now is, Can the true sender be established form the email header?

br3ach 03-03-2004 12:30

Re: Ntl sending viruses!
 
Possibly. Post the headers here, and we'll see....

Stuartbe 03-03-2004 12:34

Re: Ntl sending viruses!
 
Duplicate Thread !

http://forum.nthellworld.co.uk/showthread.php?t=8779

Stuart 03-03-2004 12:56

Re: Email from NTL - possible virus
 
Quote:

Originally Posted by timewarrior2001
I dont think its sepcific to NTL, I am certain the address will be spoofed.

It's not specific to NTL. I work for a Uni. We have been getting similar warnings from management@ac.uk or support@ac.uk. These are not valid email addresses. If anyone here is a Student or works for any kind of educational establishment, do not open emails from these addresses (or any @ac.uk address).

zovat 03-03-2004 13:04

Re: Email from NTL - possible virus
 
Quote:

Originally Posted by scastle
It's not specific to NTL. I work for a Uni. We have been getting similar warnings from management@ac.uk or support@ac.uk. These are not valid email addresses. If anyone here is a Student or works for any kind of educational establishment, do not open emails from these addresses (or any @ac.uk address).


Bagle.J is spreading quite nicely now - latest version is states that you will have you mail account disabled in 3 days and you must resign (sic) for the account. Attachment is quite nasty...

the attachment is even password protected, and the unlock code is in the mail body..

Neat variation huh... (I have linux and unix boxes, so enjoy looking at these :angel: )


All times are GMT. The time now is 18:41.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum