[Merged] EMail "Virus" from ntl

[Nemesis]

Merge completed

[mickmc]

I have this morning recieved the following message with attachment. Norton deleted the attachment as they identified it to contain a virus.

Dear user of Ntlworld.com gateway e-mail server,

Our antivirus software has detected a large ammount of viruses outgoing from your email account, you may use our free anti-virus tool to clean up your computer software.

Advanced details can be found in attached file.

Kind regards,

The Ntlworld.com team http://www.ntlworld.com

the following message is from Norton AV

Norton AntiVirus removed the attachment: MoreInfo.pif.
The W32.Beagle.J@mm threat was detected in the attachment.

What do you think peeps?

[paulyoung666]

more of the same , bin it

[Neil]

Moved to Virus/Security forum.

Please, please try to post in the correct forum, it makes like so much easier for all the members here, thanks.

[mickmc]

ok mucho apologiso

[paulyoung666]

maybe even a quick merge with this thread might be in order , all in the name of housekeeping you know

[mickmc]

Norton AntiVirus removed the attachment: MoreInfo.pif.
The W32.Beagle.J@mm threat was detected in the attachment.
This is a notification I got after getting 2 emails this AM from NTL. The message read as follows

Dear user of Ntlworld.com gateway e-mail server,

Our antivirus software has detected a large ammount of viruses outgoing from your email account, you may use our free anti-virus tool to clean up your computer software.

Advanced details can be found in attached file.

Kind regards,

The Ntlworld.com team http://www.ntlworld.com

Surely this is not from our supreme serice provider

Originally Posted by mickmc

Surely this is not from our supreme serice provider

Correct - it isn't. The virus simply picks the domain name from your e-mail address.

Btw, do you really need to post it in such big letters ?

[Buzzby]

Have a look at this! nice is it not???

Of course I won't touch it with a bargepole.


Return-Path: <200404272018.i3RKIARQ026918@citrine.spiritone.com >
Received: from trebor ([66.238.96.155]) by mta02-svc.ntlworld.com (InterMail vM.4.01.03.37 201-229-121-137-20020806) with SMTP id <20040506183016.CDQF19647.mta02-svc.ntlworld.com@trebor> for <*******@ntlworld.com>; Thu, 6 May 2004 19:30:16 +0100
Date: Thu, 06 May 2004 11:28:12 -0800
To: *******@ntlworld.com
Subject: Notify about your e-mail account utilization.
From: administration@ntlworld.com
Message-ID: <lsmyfcicpopxuqxjyiq@ntlworld.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--------qqulyxdrtorworcujyfr"

Move To: (Choose Folder) SentMail Trash

Hello user of Ntlworld.com e-mail server,

Our main mailing server will be temporary unavaible for next two days,
to continue receiving mail in these days you have to configure our free
auto-forwarding service.

Please, read the attach for further details.

Attached file protected with the password for security reasons. Password is
54374.

Sincerely,
The Ntlworld.com team http://www.ntlworld.com



Download Attachment: TextDocument.zip