Author Topic: New Virus warning -- bogus e-mails (Read 3125 times)

System · « **on:** March 03, 2004, 05:31:17 PM »

This is an official warning that a new Virus is being sent out using FORGED random names (including Amiga.org). DO NOT open the attachments!!! We did not, nor would we ever send these e-mails under any circumstances.

Here's an example of the text from a forged message that I just received.

----------------
Dear user of "Amiga.org" mailing system,

Your e-mail account has been temporary disabled because of unauthorized access.

Advanced details can be found in attached file.

For security purposes the attached file is password protected. Password is "17338".

Kind regards,
The Amiga.org team http://www.amiga.org
----------------

Varthall · « **Reply #1 on:** March 03, 2004, 05:59:42 PM »

The warning here is not to open the attachments as they are not Amiga executables, so they can't be executed in any way.

Varthall

SilvrDrgn · « **Reply #2 on:** March 03, 2004, 06:13:55 PM »

I got one that looked like that ... claiming to be from my ISP (Road Runner). Looked inside the ZIP file on my Amiga and saw a .EXE file. That Email went in the trash bin right away, even though it wouldn't have done anything to my miggy.

Mr.Carlito · « **Reply #3 on:** March 03, 2004, 06:16:14 PM »

I had already three weeks ago ago.
Delay should for Amiga be not dangerous.
Registered with AnitSpam.

MaDDuck · « **Reply #4 on:** March 03, 2004, 06:18:48 PM »

exactly why I'm glad I don't run windows!!!

Heck, the Amiga has more viri than OSX 10.3 does..

So be careful all of you widows users, it's a dangerous world!!

jd997uk · « **Reply #5 on:** March 03, 2004, 06:49:42 PM »

@all

I've just received another email that has an infected attatchment on it. The virus is the Bagel.c one.

The strange thing is that the "sender" is the same one that sent me another infected mail a few weeks back.

@Wayne

Would it be worthwhile those of us who've received infected mails PM'ing you the senders details. That way we could build up a trail of who it may be? I've only had little direct contact with a few A.org members and unless this is a hand crafted attack (ie painstakingly going through each and every A.org member's details and grabbing their mail addresses), my suspicion is someones PC has been infected with this virus and is chomping its way through their address book.

BTW the title of the email is 'You really love me? he he' and the attatchment is called 'bbdcbdbd.zip'

Regards

-john

System · « **Reply #6 on:** March 03, 2004, 07:39:44 PM »

Quote

Would it be worthwhile those of us who've received infected mails PM'ing you the senders details

Thanks, but no. It's not helpful.

@everyone else.

Thanks for the confidence, but I'm not an idiot. :-)

I know the Amiga isn't affected, but considering that a vast majority of you are using Windows and Outlook, I think that notifying everyone is by far the lesser of two evils. While I'm not including the brilliant users of Amiga.org in this statement, would the average Windows user really hesitate if they received what appears to be a legitimate e-mail from Amiga.org saying that there is a problem with their account?

Wayne

Piru · « **Reply #7 on:** March 03, 2004, 07:39:47 PM »

Quote

Would it be worthwhile those of us who've received infected mails PM'ing you the senders details.

No. The From:-field is forged.

The only way these emails would useful for tracking purposes would be to get full headers of the email messages.

The last "Received: from" entry has the name and IP of the sending system. If this is a localhost or LAN ip, then you need to walk the received chain upwards till you find the external IP of the sending host.

Doobrey · « **Reply #8 on:** March 03, 2004, 11:55:50 PM »

I just had a friend call to ask me to fix her pooter, she thinks it`s a virus...
When I got rid of the last virus 6 months ago, I sat her down and showed her the firewall and virus checker, and showed her howto check for updates etc.
So tonight I asked her "You have been checking for updates haven`t you ?"
I wasn`t suprised when she said "No" :pissed:

weirdami · « **Reply #9 on:** March 04, 2004, 12:02:39 AM »

@Wayne

The email forwarding is turned off, right?

System · « **Reply #10 on:** March 04, 2004, 03:02:07 AM »

@weirdami

Correct.

Varthall · « **Reply #11 on:** March 04, 2004, 12:35:46 PM »

@Wayne

Is there any "average Windows user" here? I always guessed that all registered users here have at least a bit more knowledge that the average computer user. Otherwise, why they would be interested in anything related to Amiga? :-?

Varthall