[Merged] EMail "Virus" from ntl

[carlingman]

LynneC

Maybe worth you asking the Mods/Admin here to strip the e-mail address quoted from your post if it is a valid one and save you from the spam harvesters.

[keithwalton]

I've had one similar to mick44's this evening claiming to be from the ac.uk team instead. such a shame that dont exist (me guesses the virus e-mail claims to be from the last two words in the e-mail)
what was rather amusing was the uni e-mail server had caught and removed the attachment before it even got to me, made me chuckle at least.

Though i can see alot of daft people falling for it :s

[das316]

Originally Posted by zovat

Bagle.J is spreading quite nicely now - latest version is states that you will have you mail account disabled in 3 days and you must resign (sic) for the account. Attachment is quite nasty...

the attachment is even password protected, and the unlock code is in the mail body..

Neat variation huh... (I have linux and unix boxes, so enjoy looking at these )

Yep I had that one over a month ago but deleted it never had it since

[Stuart]

Originally Posted by Riddles

I've just recieved this email:

Dear user of Ntlworld.com,

Your e-mail account has been temporary disabled because of unauthorized access.

For more information see the attached file.

Attached file protected with the password for security reasons. Password is *****.

Sincerely,
The Ntlworld.com team http://www.ntlworld.com


Thought it quite strange so came on here to check it out.

Riddles, welcome to nthw!.

Interesting idea, emailing someone to say you have disabled their email account. Very Zen.

Mind you, I can actually imagine NTL doing something like that.

[rdhw]

Originally Posted by LynneC

Received: from celeron1 ([213.48.235.184]) by mta04-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with SMTP
id <20040303111331.YUVU20489.mta04-svc.ntlworld.com@celeron1>
for [Admin Edit(Mick): Email address Removed.];Wed, 3 Mar 2004 11:13:31 +0000
Date: Wed, 03 Mar 2004 11:15:49 +0000

This shows the true sender of the virus to have been 213.48.235.184, a user of the BlueYonder network, whom you probably know, as they have you in their address book.

[rdhw]

Originally Posted by Riddles

I've just recieved this email:

Dear user of Ntlworld.com, ..snip..

Riddles, I hope you have figured out now that the attachment was a virus, bagle.j.

[Riddles]

I figured out straight away as I've had a few emails like this from different sources. It was deleted after I copied & Pasted it here.

Seemed a bit obvious when they use the email address to send you an email telling you your account has been disabled.....hardly brain surgeon's these guys are they.

[zovat]

Originally Posted by Riddles

I figured out straight away as I've had a few emails like this from different sources. It was deleted after I copied & Pasted it here.

Seemed a bit obvious when they use the email address to send you an email telling you your account has been disabled.....hardly brain surgeon's these guys are they.

Nope - but then neither are the kind of people these viruses are aimed at...

It obviously works - as the number of reported infections is climbing all the time...

[grahamj]

If you receive any emails with:

E-mail account disabling warning.
E-mail account security warning.
Email account utilization warning.
Important notify about your e-mail account.
Notify about using the e-mail account.
Notify about your e-mail account utilization
Warning about your e-mail account.
(there are more of these! check antivirus sites for full info)

its fake. this is the bagle.j worm.

The netsky virus is also hammering email servers and users with :-

Re: Re: Re: Your document
Re: Hello
Re: Hi
Re: Re: Message
Re: Your picture
Re: Here is the document
Re: Your document
(there are more of these! check antivirus sites for full info)

its really simple! DONT OPEN ATTACHMENTS! even if it does appear to come from a 'Friend' IF IN DOUBT delete it ......or phone your 'friend' and ask if he/she actually sent the email.


Half the viruses out there are HOPELESS unless people help them along by opening attachments! it appears a lot of people WORLD WIDE seem to just CLICK AND OPEN.

Think about it....would you let someone in to your home if they said they were from the water company...just because they have a nice ID badge? NO you'd phone the company and make sure the person @ ur door was lagit.

oh and if you have a look at some attachments that may come in by email, they will have double file extensions.

E.G.
yoursoftware.doc.exe
yourfiles.xls.pif
NEVER EVER EVER open these types! that really is asking for trouble

anyway! keep those virus scanners up to date!

[zovat]

Originally Posted by grahamj

If you receive any emails with:


Think about it....would you let someone in to your home if they said they were from the water company...just because they have a nice ID badge? NO you'd phone the company and make sure the person @ ur door was lagit.

You know the sad thing is that people use that ploy to break into houses all the time - and people just let them in.......

Unfortunately (In my Experience) the majority of people who spread these viruses are normally intelligent people who seem to have no common sense when it comes to computers. (unlike me who has no common sense when it comes to reality )

[Stuartbe]

Originally Posted by grahamj

oh and if you have a look at some attachments that may come in by email, they will have double file extensions.

Trouble is that most versions of MS windows turn of the file extention view option by default so a file like picture.bmp.scr looks like picture.bmp if the option is turned off. When are MS going to come to there senses and set this option to enabled as default ???????

[ian@huth]

Originally Posted by stuartbe

Trouble is that most versions of MS windows turn of the file extention view option by default so a file like picture.bmp.scr looks like picture.bmp if the option is turned off. When are MS going to come to there senses and set this option to enabled as default ???????

I don't know why they even bother to have an option to turn on / off file extensions. It would certainly be better just to show them by default.

The problem though is that people tend to either know about file extensions or they don't and if they don't then it doesn't really matter whether they are shown or not.

[Stuartbe]

Originally Posted by ianathuth

I don't know why they even bother to have an option to turn on / off file extensions. It would certainly be better just to show them by default.

The problem though is that people tend to either know about file extensions or they don't and if they don't then it doesn't really matter whether they are shown or not.

Very true m8..... At least they have made a step in the right direction by blocking attachments in OE...... It can be a pain in the ass but at least it stops noobie users executing the files....... Shame they dont block active scripting on the emails to !!!

[2old4this]

Got this


Dear user of Ntlworld.com gateway e-mail server,

Your e-mail account will be disabled because of improper using in next
three days, if you are still wishing to use it, please, resign your
account information.

For more information see the attached file.

Kind regards,
The Ntlworld.com team http://www.ntlworld.com

[Stuartbe]

Originally Posted by 2old4this

Got this


Dear user of Ntlworld.com gateway e-mail server,

Your e-mail account will be disabled because of improper using in next
three days, if you are still wishing to use it, please, resign your
account information.

For more information see the attached file.

Kind regards,
The Ntlworld.com team http://www.ntlworld.com

Its a fake mail m8.... Delete it !