Amiga.org

Amiga News and Community Announcements => Amiga News and Community Announcements => Amiga.org site announcements => Topic started by: System on March 03, 2004, 05:31:17 PM

Title: New Virus warning -- bogus e-mails
Post by: System on March 03, 2004, 05:31:17 PM
This is an official warning that a new Virus is being sent out using FORGED random names (including Amiga.org).  DO NOT open the attachments!!!  We did not, nor would we ever send these e-mails under any circumstances.

Here's an example of the text from a forged message that I just received.

----------------
Dear user of  "Amiga.org"  mailing system,

Your  e-mail account has been  temporary disabled because of  unauthorized access.

Advanced details  can be found in attached file.

For security purposes the  attached file  is  password protected.  Password is "17338".

Kind regards,
    The Amiga.org team                              http://www.amiga.org
----------------
Title: Re: New Virus warning -- bogus e-mails
Post by: Varthall on March 03, 2004, 05:59:42 PM
The warning here is not to open the attachments as they are not Amiga executables, so they can't be executed in any way.

;)

Varthall
Title: Re: New Virus warning -- bogus e-mails
Post by: SilvrDrgn on March 03, 2004, 06:13:55 PM
I got one that looked like that ... claiming to be from my ISP (Road Runner).  Looked inside the ZIP file on my Amiga and saw a .EXE file.  That Email went in the trash bin right away, even though it wouldn't have done anything to my miggy.
Title: Re: New Virus warning -- bogus e-mails
Post by: Mr.Carlito on March 03, 2004, 06:16:14 PM
I had already three weeks ago ago.
Delay should for Amiga be not dangerous.
Registered with AnitSpam.
Title: Re: New Virus warning -- bogus e-mails
Post by: MaDDuck on March 03, 2004, 06:18:48 PM
exactly why I'm glad I don't run windows!!!

Heck, the Amiga has more viri than OSX 10.3 does..

So be careful all of you widows users, it's a dangerous world!!
Title: Re: New Virus warning -- bogus e-mails
Post by: jd997uk on March 03, 2004, 06:49:42 PM
@all

I've just received another email that has an infected attatchment on it. The virus is the Bagel.c one.

The strange thing is that the "sender" is the same one that sent me another infected mail a few weeks back.

@Wayne

Would it be worthwhile those of us who've received infected mails PM'ing you the senders details. That way we could build up a trail of who it may be? I've only had little direct contact with a few A.org members and unless this is a hand crafted attack (ie painstakingly going through each and every A.org member's details and grabbing their mail addresses), my suspicion is someones PC has been infected with this virus and is chomping its way through their address book.

BTW the title of the email is 'You really love me? he he' and the attatchment is called 'bbdcbdbd.zip'

Regards

-john
Title: Re: New Virus warning -- bogus e-mails
Post by: System on March 03, 2004, 07:39:44 PM
Quote
Would it be worthwhile those of us who've received infected mails PM'ing you the senders details

Thanks, but no. It's not helpful.  

@everyone else.

Thanks for the confidence, but I'm not an idiot. :-)

I know the Amiga isn't affected, but considering that a vast majority of you are using Windows and Outlook, I think that notifying everyone is by far the lesser of two evils.  While I'm not including the brilliant users of Amiga.org in this statement, would the average Windows user really hesitate if they received what appears to be a legitimate e-mail from Amiga.org saying that there is a problem with their account?

Wayne
Title: Re: New Virus warning -- bogus e-mails
Post by: Piru on March 03, 2004, 07:39:47 PM
Quote
Would it be worthwhile those of us who've received infected mails PM'ing you the senders details.

No. The From:-field is forged.

The only way these emails would useful for tracking purposes would be to get full headers of the email messages.

The last "Received: from" entry has the name and IP of the sending system. If this is a localhost or LAN ip, then you need to walk the received chain upwards till you find the external IP of the sending host.
Title: Re: New Virus warning -- bogus e-mails
Post by: Doobrey on March 03, 2004, 11:55:50 PM
I just had a friend call to ask me to fix her pooter, she thinks it`s a virus...
 When I got rid of the last virus 6 months ago, I sat her down and showed her the firewall and virus checker, and showed her howto check for updates etc.
 So tonight I asked her "You have been checking for updates haven`t you ?"
I wasn`t suprised when she said "No"  :pissed:
Title: Re: New Virus warning -- bogus e-mails
Post by: weirdami on March 04, 2004, 12:02:39 AM
@Wayne

The email forwarding is turned off, right?
Title: Re: New Virus warning -- bogus e-mails
Post by: System on March 04, 2004, 03:02:07 AM
@weirdami

Correct.
Title: Re: New Virus warning -- bogus e-mails
Post by: Varthall on March 04, 2004, 12:35:46 PM
@Wayne

Is there any "average Windows user" here? I always guessed that all registered users here have at least a bit more knowledge that the average computer user.  Otherwise, why they would be interested in anything related to Amiga? :-?

Varthall