WARNING! Virus pretending to be from PBW

geoschmo · #1 August 11th, 2003, 05:12 PM

If you get an email with an attachment called message.zip DO NOT OPEN IT. You may receieve it pretending to be from from admin@pbw.cc saying something about your account expiring. This is NOT from PBW. This is a person trying to spead a virus.

Geoschmo

[ August 11, 2003, 16:13: Message edited by: geoschmo ]

Atrocities · #2 August 11th, 2003, 05:13 PM

Quote:

Originally posted by geoschmo:
If you get an email with an attachment called message.zip DO NOT OPEN IT. You may receieve it pretending to be from from admin@pbw.cc saying something about your account expiring. This is NOT from PBW. This is a person trying to spead a virus.

Geoschmo

We should avoid Posts on this and ask that it be stickyed to the top of the forum for the time being.

That was fast!

[ August 11, 2003, 16:15: Message edited by: Atrocities ]

mottlee · #3 August 11th, 2003, 06:30 PM

Too late! not JUST PBW! ANY with that attachment! bugger to get rid of!

Krsqk · #4 August 11th, 2003, 07:27 PM

I got that, but not from PBW. Did it have "agfahakh" in the subject or the body?

Good thing I edited the .html instead of opening it.

geoschmo · #5 August 11th, 2003, 08:02 PM

Quote:

Originally posted by Krsqk:
I got that, but not from PBW. Did it have "agfahakh" in the subject or the body?

Good thing I edited the .html instead of opening it.

The couple I saw had letters in the subject like that, but different letters. Likly what happened is someone with the admin email address in their mailbox got infected and it's hiding it's origin.

Geoschmo

Captain Blood · #6 August 11th, 2003, 11:29 PM

I got one, but it sent from an admin@ on the e-mail site I use. Luckily I don't trust attachments that have little explantation. Whoever that Bugger is he's pissed me off though.

Anyway a warning that it might come from a source that seems to be your e-mail admin.

[ August 11, 2003, 22:30: Message edited by: Captain Blood ]

Ragnarok · #7 August 12th, 2003, 12:39 AM

Quote:

Originally posted by Captain Blood:
I got one, but it sent from an admin@ on the e-mail site I use. Luckily I don't trust attachments that have little explantation. Whoever that Bugger is he's pissed me off though. Anyway a warning that it might come from a source that seems to be your e-mail admin.

Confirmed. I had 2 come in the other day and Ididn't open them because I didn't believe that I was getting something from the Admins as Yahoo. They both just had some mumbled letters for the subject then it was from admin@yahoo. But they are safely in the deleted box now. This must be going around as our exchange server at work is being affected by some kind of virus that we can't figure out how it got in in the first place. We'll get it though. Nasty little bug shutting out email system down.

Baron Grazic · #8 August 12th, 2003, 01:06 AM

The Virus is called "Mimail.A".
The Subject usually says "Your Account" followed by strange letters but variations will appear.
The Sender is usually "admin@your_domain"

Most virus checkers should have a patch to detect this virus by now, so I would suggest updating your virus checkers.

Our work has had this virus almost 100 times in the past 2 days, but our MailSweeper has stopped all instances of it.

Edit - For more details, check out the following link http://us.mcafee.com/virusInfo/defau...virus_k=100523

[ August 12, 2003, 00:10: Message edited by: Baron Grazic ]